Security and data
This page explains, in plain terms, how an Axis Cloud server is protected and what happens to your data. For the legal terms, see the Privacy Policy and Terms. For self-hosted installs, see Self-host Axis.
Real Axis UI with deliberately seeded, privacy-safe demonstration content.
Your own server
Section titled “Your own server”Each Axis Cloud customer gets a dedicated server that runs only their Axis. Your projects, chats, Docs, memory, files and connection credentials live on that server’s disk, not in a shared database with other customers. Servers run with our hosting provider, Hetzner, in Germany (EU).
Nobody reaches it without signing in
Section titled “Nobody reaches it without signing in”Your server has no open inbound ports. It cannot be reached directly from the internet at all.
Instead, it opens an encrypted WireGuard tunnel outward to the Axis edge, a small gateway that
Axis runs. Every visit to https://<your-name>.cloud.tryaxis.so goes through the edge, which:
- Checks that you are signed in to the Axis account that owns this server. If you are not, it sends you to the Axis sign-in page (email code or Sign in with Apple) and back.
- Forwards the request through your server’s tunnel, with a short-lived signed note saying who you are.
Your server checks that signature on every request and refuses anything that did not come from the edge with a valid signature for this server, even if its firewall were somehow switched off.
Other details:
- Your sign-in on each browser lasts 24 hours. The cookie is locked to your server’s address, sent only over HTTPS, and unreadable by page scripts. If a server is ever re-created, old sign-ins stop working.
- Repeated sign-in attempts from the same address are rate-limited.
- SSH is turned off on customer servers. Axis staff reach servers for operations only over a private admin network, never over the public internet.
What the edge can see
Section titled “What the edge can see”Encryption (HTTPS) between your browser and Axis ends at the edge, and the edge forwards traffic to your server through the encrypted tunnel. That means the edge handles your traffic unencrypted while it passes through, the same way any web host or proxy does. The edge does not store that content. Its logs record operational events such as sign-ins, servers connecting, and connection failures.
Claude and ChatGPT connectors
Section titled “Claude and ChatGPT connectors”Connectors use your server’s own sign-in (OAuth), separate from your browser session. Nothing is shared until you approve the app in Settings → Connected AI apps, choosing its access and projects, and you can revoke it at any time. See Use Axis from Claude or ChatGPT.
Your models, your keys
Section titled “Your models, your keys”You bring your own model provider. Model requests go from your server directly to the provider you chose, under your own account with that provider. Axis does not route them through its own servers, and that provider handles the prompt and context it receives under its own terms. See Model providers.
Credentials for model providers and Connections are stored on your server, encrypted in its vault by default, and never shown in chats or logs.
Backups
Section titled “Backups”- Every night your server writes an encrypted backup that captures Axis in a consistent state.
- An extra backup is taken before every Axis update, resize or restore.
- Backups go to a private object-storage bucket in the EU. We keep 7 daily and 4 weekly backups.
- Your server never holds storage credentials. It gets a short-lived link that can upload exactly one backup file.
- The encryption keys are held by Axis. Only Axis can unlock a backup, and it hands the key to your own server only to restore it.
In Settings → Axis Cloud you can see when the last backup ran, press Back up now, and restore the server to any listed backup. A restore replaces everything since that backup, and Axis restarts when it finishes.
When you leave
Section titled “When you leave”- When your subscription ends, we email you a link to a full export of your server, with the date the server stops and the date it is deleted.
- If you cancel, the server runs until the end of the period you paid for. If a payment fails, it keeps running for 48 hours while you fix it. A refund ends access straight away.
- When the server stops, we take a private snapshot of it and then delete the server.
- Resubscribe within 14 days and your same server is rebuilt from that snapshot, exactly as it was.
- After 14 days, the snapshot and your server’s backups are deleted.
Need an export at another time? Email support@tryaxis.so.
Services we use
Section titled “Services we use”| Service | What it does for Axis Cloud |
|---|---|
| Hetzner | Runs your server and the Axis edge, in Germany (EU) |
| Amazon Web Services | Stores encrypted backups in the EU (Frankfurt) |
| Cloudflare | DNS for cloud.tryaxis.so (it does not proxy your traffic) |
| Polar | Checkout and subscriptions |
| Resend | Account and service emails |
The Privacy Policy is the authoritative list.