Last updated: 29 June 2026. This Privacy Statement should be read together with the xAIDRA Terms and Conditions and any applicable enterprise agreement, order form or Data Processing Agreement.
1. Overview
xAIDRA Pty Ltd provides a distributed security platform spanning a web dashboard, Linux and Unix agents, backend services and the xAIDRA Mobile Application. This Privacy Statement explains what data may be collected or processed, how it is protected, and how customers and users can exercise privacy rights.
Customers are generally the Data Controller for infrastructure and device data they choose to collect through the Platform. xAIDRA generally acts as the Data Processor for that data, unless another role is specified in a written agreement.
2. Data collected by the Platform
The data collected depends on the services enabled, the customer configuration, the device type and the authorized workflow being performed. xAIDRA may process dashboard account data, operational telemetry, scan results, device review information, network metadata and support information.
3. Web dashboard data
The dashboard may process administrator emails, account identifiers, authentication logs, single sign-on records, IP addresses used to access the dashboard, platform usage analytics, tenant configuration and operational activity records.
This data is used to authenticate users, operate the service, support customer administration, maintain security, investigate misuse and improve platform reliability.
4. Linux and Unix agent telemetry
Depending on configuration and authorized job type, Linux and Unix agents may process process execution logs, file and descriptor metadata, network socket connections, system artifacts, scan results, MiniClient collection outputs and memory captures when explicitly requested by an authorized user.
Agent collection is intended to support digital forensics, security review, central coordination and operational response. Customers are responsible for ensuring they have lawful authority to deploy agents and collect data from the relevant systems.
5. Mobile agent telemetry
xAIDRA Mobile may process Android device posture information, installed application manifests, permission information, system logs, hardware configuration, network metadata and localized RF environment data such as Wi-Fi and cellular metadata where enabled and permitted.
Mobile data is used to support device review, evidence collection, network review and practical mobile security workflows.
6. Sovereign storage and security
For Australian enterprise and government customers, xAIDRA can support isolated sovereign infrastructure arrangements as defined in the applicable commercial agreement. Storage location, retention and isolation commitments may vary by plan and contract.
- Encryption in transit: Data in transit uses TLS 1.2 or higher, including protected command delivery where applicable.
- Encryption at rest: Data at rest is protected using strong encryption controls such as AES-GCM-256 where supported by the relevant service.
- Execution integrity: Agent execution policies and protected artifacts may use signing and cryptographic validation controls.
7. AI-assisted processing
xAIDRA may integrate with third-party large language model services, including Google Gemini via Vertex AI, to provide AI-assisted analysis features in the dashboard. When those features are used, relevant security metadata may be processed by those services.
For enterprise customers, AI processing restrictions, isolation guarantees, model training exclusions and data handling requirements are governed by the applicable commercial agreement.
8. Global privacy rights
xAIDRA supports reasonable requests relating to access, correction, deletion, portability and restriction of personal data where required by applicable law, including GDPR, CCPA and other regional privacy frameworks.
Users may opt out of non-essential cookies on the marketing website where such cookies are used. Customers may request a Data Processing Agreement by contacting xAIDRA.
9. Contact
Privacy requests, Data Subject Access Requests and Data Processing Agreement requests can be sent to [email protected]. General product and commercial enquiries can be sent to [email protected].