CreateX

Deployment & security

Three ways to deploy.
One set of safeguards.

The same CreateX runs on the Hong Kong cloud, the mainland China cloud or your own servers. Wherever it runs, permissions and privacy boundaries are enforced by the system itself — not just promised in a policy.

Deployment options

Ready to go

Hong Kong cloud

For teams in Hong Kong and overseas

  • Servers, databases, files and backups stay in Hong Kong
  • Updated several times a week, and new features land here first
  • Pay for AI usage with credits — nothing to maintain
Ready to go

Mainland China cloud

For teams in mainland China

  • Servers, databases, files and backups stay in mainland China
  • Same release and same assistant as the Hong Kong cloud, updated automatically
  • Pay for AI usage with credits — nothing to maintain
On your servers

Private deployment

For companies with data-residency requirements

  • Installs with one command in about twenty minutes, on a single Linux server
  • Business data, files and every app's database stay on your server
  • Outbound connections only, no inbound ports; remote assistance stays off until your admin turns it on
  • Daily backups and a snapshot before every update; licensed by seat and term

Safeguards built into the system

You confirm first

Meetings, events, tasks, approval requests and emails your assistant creates or sends for you arrive as a card, and take effect only when you confirm. Before changing or canceling anything, it tells you what will change.

Your manager can't read your assistant chats

Managers see their team's schedules, open tasks, whether reports were submitted and recent file names — never assistant conversations, delegated work, file contents, memory or call transcripts.

No “read conversations” button for admins

Company admins manage accounts, roles, knowledge permissions, apps and billing. The admin console has no page that shows anyone's conversations.

Answers respect permissions

Every knowledge-base search is filtered by folder permissions and checked again when a source is opened. Business apps get only the permissions an admin grants, and never see more than the person using them.

Companies are walled off

Each company's data is isolated at the database level, and every business app has its own database, isolated by company.

Credentials stay encrypted

Mailbox passwords, service keys and other credentials are encrypted with AES-256-GCM and never shown again once saved. Sign-in passwords are hashed with argon2id.

No meeting recordings

CreateX Meetings run on media servers inside each deployment, not on a third-party meeting service. What's kept is the transcript and the minutes — never an audio recording.

Your memory is yours

Only you and your assistant can see what it remembers. It's never used in group replies, and it never stores passwords or ID numbers.

FAQ

Are accounts shared between the two clouds?

No. The Hong Kong cloud and the mainland China cloud are separate services, each with its own companies and accounts. The first time you open the desktop or mobile app, it asks which one to use: Hong Kong, mainland China or a private deployment.

With a private deployment, does any data leave our servers?

Your business data — databases, files and each app's data — stays on your server. AI requests are processed through CreateX's model gateway, and the site sends license, update and system-health information to CreateX. By default that's counts only, never content.

Do AI features use third-party services?

Yes. On the clouds, the content needed for an AI task goes to third-party providers by category: large language models, speech recognition, web search and document parsing. See the Third-Party AI Services Notice for details.

Can CreateX staff see our data?

The cloud operations console shows member lists, usage without user names, credits and storage. It has no page for conversations, files or knowledge content. On private deployments, remote assistance is off by default; if your admin turns it on, every remote action is logged in your console.

Let's talk about
your deployment

We'll recommend the right setup for your data-residency, network and compliance requirements.