How 1MLX protects your listings, deal data, and member information.
1MLX is a closed cooperative. Your listing data, deal activity, and member information stay inside the exchange. We don't sell data, we don't share it with third parties for marketing, and we don't use it to compete with you. This page explains the specific measures in place — and the limits of what we can guarantee.
Where your data lives and how it's protected at the infrastructure level.
Your listings are the core asset. Here's how we treat them.
Space Cadet is a dedicated 1MLX instance running on our servers. Your questions, the database queries, and the answers it generates all stay within 1MLX infrastructure — nothing is routed through an external AI provider.
What Space Cadet can access: Listing data, market statistics, and research that members have authorized for the exchange. It does not have access to your firm's internal deal pipeline, financial records, or communications.
What Space Cadet does not store: Conversations are processed in-session. Space Cadet does not build a persistent profile of your queries or share your questions with other members.
What we're still deciding: Whether conversation history will be retained for your own reference (opt-in), and the exact retention window. We'll publish this before launch.
Space Cadet can read responses aloud. Like the AI itself, voice synthesis runs within 1MLX infrastructure.
Some things are off the table. Period.
We don't sell your data. Not to data aggregators, not to tech companies, not to anyone. The exchange exists to serve its members, not to monetize their information.
We don't use listing data to train AI models. Your listings are not training material. Space Cadet is trained on market knowledge and research — not on the proprietary details of your deals.
We don't share one firm's activity with another. Your search patterns, listing views, and Space Cadet queries are not visible to other member firms.
We don't allow public access. There is no "free tier" or public search. Every user is a verified broker at an enrolled firm.
We'd rather tell you what we're still working on than pretend everything is settled.
SOC 2 certification for 1MLX itself. We're building toward this but don't have it yet. Our infrastructure providers hold their own certifications. We'll pursue ours as the platform matures.
Formal penetration testing. Scheduled for pre-launch. Results will be shared with founding members.
Data Processing Agreement for members. A DPA specific to 1MLX will be available before production launch, covering how we handle your data, retention periods, and your rights.
Incident response plan. Being drafted. Will include notification timelines, member communication protocols, and remediation procedures.
A note to founding members: You're helping us build this. If there's a security concern we haven't addressed, or a measure you'd expect to see here, tell us. This page will evolve as the platform does — and your input shapes what goes on it.