Commitment to Data Security, Information Safety & Legal Transparency

DXS proactively executes a mutual Non-Disclosure Agreement (NDA) with clients prior to conducting business discovery or accessing existing infrastructure.

All customer financial records, internal operations, customer lists, pricing models, and trade secrets are strictly treated as highly confidential.

All DXS engineers, consultants, and project managers execute strict internal confidentiality agreements and bear individual legal responsibility for safeguarding project assets.

DXS only accesses and processes data actively provided by the client for the explicit purposes of: architectural consulting, software engineering, UAT testing, API integration, and ongoing maintenance.

During testing and QA cycles, DXS actively promotes and assists clients in applying automated data masking and anonymization to production datasets.

DXS never sells, rents, distributes, or transfers customer proprietary data to any third party for commercial or advertising purposes.

Encryption in Transit & at Rest: All network traffic and API interfaces are encrypted via TLS 1.3. Sensitive databases utilize AES-256 encryption at rest.

Role-Based Access Control (RBAC): Systems follow the principle of least privilege. Every data retrieval, mutation, and deletion event is recorded in immutable audit logs.

Automated Security Testing: Development workflows follow OWASP Top 10 guidelines, continuous SAST/DAST vulnerability scanning, and pre-production penetration testing.

All bespoke source code, architectural blueprints, database schemas, and intellectual property developed under the contract belong exclusively to the client upon final acceptance.

DXS commits to delivering complete, well-documented source code, deployment scripts, and detailed API specifications.

DXS does not insert proprietary lock-in mechanisms or backdoors, empowering clients to independently maintain or transition systems at any time.

DXS adheres to data protection principles under Government Decree 13/2023/ND-CP for all systems handling end-user personal data.

DXS architectures empower enterprise clients to honor data subject rights: right to access, right to rectify, right to consent withdrawal, and right to be forgotten.

Incident response protocols are established to immediately notify clients and regulatory authorities within statutory timelines in the event of any security vulnerability.

DXS delivers engineering services to the highest professional industry standards, adhering strictly to agreed Service Level Agreements (SLAs).

DXS is not liable for service outages or data losses resulting from: force majeure events, unauthorized third-party infrastructure failures outside DXS control, or client credential compromise.