Trust Center
Welcome to the Nuix Trust Center
At Nuix, security and governance aren't just priorities, they are part of the foundations that support our organisation. We recognise that using our software or entrusting us with your data represents a trust commitment, and we work to maintain best-practice standards of data protection, privacy, and compliance.
What You'll Find Here
This Trust Center serves as your gateway to understanding how we protect our business, software and your data and maintain the trust you place in us. Here you can:
- Explore our comprehensive security architecture and controls
- Access and Review our compliance certifications and audit reports
- Access detailed security documentation and policies
- Learn about our data privacy practices and regulatory commitments
- Request additional security information to support your due diligence processes
Product Security
We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
App Security
We take application security seriously and are putting together a program to monitor internal apps.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Policies
We are currently working with experts to put together our company policies. Please contact us for more details.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Subprocessors
Trust Center Updates
Nuix Automate — Product Release Updates
Nuix Automate 100.18 — Feature & Security Update
| Field | Value |
|---|---|
| Bulletin ID | NUIX-TCU-2026-002 |
| Product | Nuix Automate |
| Versions Affected | All Nuix Automate deployments running versions prior to 100.18.5 |
| Publication Date | 2026-05-06 |
| Severity | Medium |
| Customer Action | Upgrade Recommended |
Executive Summary
We are pleased to announce the Nuix Automate 100.18 release series, culminating in version 100.18.5. This update delivers significant new Gen AI and Knowledge Graph workflow capabilities, strengthens security with a CVE patch and SSRF mitigation, and resolves numerous stability issues across the Scheduler and Workflow components. Customers are encouraged to upgrade to benefit from improved reliability and expanded automation features.
New Features & Enhancements
Workflow Operations
- Gen AI Knowledge Graph Operations: New operations for generating ontologies, extracting to Knowledge Graph, resolving entities, and merging Knowledge Graph entities — enabling AI-driven entity analysis directly within workflows.
- Redaction Operations: Added Redact Faces, Redact Items, and Remove Redactions operations for automated redaction workflows.
- Markup Set Management: New Add Markup Set and Delete Markup Set operations.
- Search Term Hit Report: New operation for generating search term hit reports within workflows.
- Discover Integration: Added Assign/Unassign Users to Nuix Discover Case and Copy Text operations.
Scheduler
- Gen AI Telemetry: Added Gen AI Telemetry in Third Party services for monitoring AI operation usage.
- Gen AI Safety Identifiers: Support for configuring safety identifiers for Gen AI Third-Party services.
Workflow Improvements
- Gen AI Image Processing: Options to resize native images, send pages in configurable groups, and send previous pages for context in Gen AI Prompt on Images and Transcribe Items operations.
- Vega-Lite Chart Rendering: Markdown Report operation now supports rendering Vega-Lite charts.
- Discover Promotion Enhancements: Added Scope Query field and NLP data export option to the Promote to Discover operation.
- Knowledge Graph Promotion: Option to promote items from a stored graph.
- Report Attachments: Option to attach all reports in the Notify operation with new
{report_files}parameter. - Job Diagnostics: Added the option to download diagnostics for Jobs.
- Japanese Language Support: Language translations added for Japanese-speaking teams.
Bug Fixes
Scheduler
- Fixed an issue where using the RSMF exporter in Nuix engine would fail due to a library dependency conflict.
- Fixed an issue that would cause newly added Third Party services to be in an error state.
- Fixed an issue where adding an engine with a null ID would prevent Scheduler from starting.
- Fixed an issue where Engines in an error state would never release jobs back to the Resource pool.
- Fixed an issue where null workflow XML could be sent to the Engine causing an error state until the Job was aborted.
- Fixed an issue where in rare scenarios a Job could start on an engine and then disconnect.
Workflow
- Fixed an error that would occur when creating Azure Storage Account Data Repositories.
- Fixed an issue with hard error when creating a new Notice Template.
- Fixed an issue with scrolling in the workflow builder operations view.
- Fixed an issue with worker-based operations where skipping multiple operations would cause processing settings configured in the Configure Nuix operation to be ignored.
- Fixed an issue with the Purview Export Download where the download could fail silently in rare cases.
- Fixed an issue where OCR, Imaging and Processing profiles inside a case on a network share would not be recognized.
- Fixed an issue where the Markdown Report operation did not populate the
{last_report_file}parameter. - Fixed an issue where Gen AI Prompt on Images and Gen AI Transcribe operations did not run on native image files if the option Repeat prompt for each page was disabled.
- Fixed an issue where uploading a workflow library failed uploading workflows with script and external commands.
- Fixed an issue where users could sign in to disabled Third Party services.
- Fixed an issue where active hold policies were preventing Purview cases from being closed.
- Fixed an issue where the Configure Gen AI Connection operation failed to connect to certain reasoning models when deployed on vLLM.
- Fixed an issue where the Convert Purview Advanced operation could not handle control characters in the custodian field.
- Fixed an issue where the Download Purview Export operation would fail due to API changes.
- Fixed Custodian ID mismatch issues in the Release Purview Custodians and Remove Hold from Purview Custodians operations.
- Fixed an issue where the Convert Purview Advanced operation would not pick up PST export files in subdirectories.
- Fixed an issue with the Promote to Discover operation that would cause chat documents to be split incorrectly.
- Fixed an issue where decoding an item URL could contain unescaped control characters causing the Convert Purview Advanced operation to fail.
Security & Vulnerability Updates
This release resolves one publicly-listed CVE and includes a proactive SSRF mitigation. Nuix recommends upgrading to Automate 100.18.5 to ensure your deployment meets current security expectations.
Third-Party CVE Patches
| CVE / Advisory | Description | Component | Status |
|---|---|---|---|
| CVE-2026-25639 | Axios library vulnerability resolved by upgrading to a patched version. | Scheduler | Patched in 100.18.1 |
Proactive Security Improvements
- SSRF Mitigation: Prevented Server-Side Request Forgery (SSRF) execution via Automate Webhooks for Local Deployment installations.
- Job Resubmission Hardening: Prevented resubmission of jobs utilizing script files and masked/protected parameters.
Known Issues
No new customer-facing known issues were introduced by this release. If you encounter unexpected behaviour, please contact Nuix Support with logs and sample data where possible.
Customer Action Recommendation
⚠️ Upgrade Recommended
All customers running Nuix Automate versions prior to 100.18.5 are encouraged to upgrade. This release includes a security patch (CVE-2026-25639), SSRF mitigation, and numerous stability fixes. Before upgrading, perform a backup of your current data stores from %programdata%\Automate, or of the Microsoft SQL database if applicable.
Additional Resources
| Resource | Link |
|---|---|
| Nuix Download Portal | https://download.nuix.com |
| Nuix Support Portal | https://support.nuix.com |
| Security Vulnerability Disclosures | security@nuix.com |
| Automate Installation Guide | Available from the download portal |
| Automate User Guide | Available from the download portal |