Legal & Trust Overview

Hexel Studio is an enterprise Agent Cloud platform designed to enable organizations to deploy, govern, and operate autonomous AI agents with full control, accountability, and auditability.

Because Hexel operates as infrastructure for autonomous systems that interact with real data and real operational systems, we maintain a comprehensive legal, privacy, and governance framework. This framework defines how the platform may be used, how data is handled, and how responsibility is allocated between Hexel and its customers.

This page provides an overview of Hexel's legal documents and how they apply.

How These Documents Work Together

Hexel's legal framework is structured to reflect its platform architecture and risk model:

  • Organizations remain responsible for how agents are configured, approved, and used
  • Hexel provides governed infrastructure, not autonomous decision-making authority
  • All agent activity is policy-bound, auditable, and traceable
  • Certain documents apply to all users, while others apply specifically to enterprise customers, developers, or data processing activities

In the event of a conflict, the order of precedence is generally:

  1. Data Processing Addendum (for personal data processing)
  2. Terms & Conditions or Enterprise Agreement
  3. Applicable Policies
  4. Informational disclosures

Core Contractual Terms

Terms & Conditions

Governs access to and use of the Hexel Studio platform, including agent execution, account responsibilities, billing, liability, and dispute resolution

Applies to: All customers and users

Privacy & Data Protection

Privacy Policy

Describes how Hexel collects, uses, and protects information, and clarifies data controller vs processor roles

Applies to: All users

Data Processing Addendum (DPA)

Defines Hexel's obligations as a data processor under applicable data protection laws

Applies to: Enterprise customers

Platform Governance

Acceptable Use Policy

Defines prohibited uses and enforcement rules for platform safety and integrity

Applies to: All users and agents

AI & Agent Usage Policy

Defines permitted levels of agent autonomy, human-in-the-loop requirements, and high-risk action restrictions

Applies to: All customers deploying agents

Security & Trust

Security Policy

Describes Hexel's security practices and shared responsibility model

Applies to: All customers

Data Transparency

Subprocessor Disclosure

Identifies categories of third parties used to process data on behalf of customers

Applies to: Enterprise customers

Data Retention & Deletion Policy

Explains how long different categories of data are retained and how deletion works

Applies to: Enterprise customers

Legal Transparency

Government & Law Enforcement Requests Policy

Describes how Hexel responds to legally valid government and law-enforcement requests

Applies to: Enterprise customers