LEGAL · AI PARTNER & SUPPLIER POLICY
Governance Doesn't Stop at Our Boundary. It Follows the Data.
Every partner who touches NexGenomics technology — MSSPs, MSPs, resellers, technology partners, and developers — inherits obligations proportional to their access and risk profile. This policy defines exactly what those obligations are, for each partner type.
Request the Full Policy → See Partner Programs →
Five Partner Types, Five Risk Profiles.
| Partner Type | Primary Product | Key Obligations |
|---|---|---|
| MSSP | Axiom | BAA (where PHI involved), DPA, SOC 2 Type II or ISO 27001, annual security assessment, full incident reporting |
| MSP | Nexus | DPA, minimum security baseline, annual compliance attestation, incident reporting |
| Reseller / VAR | Axiom and/or Nexus | DPA where applicable, reseller agreement, brand usage compliance, customer disclosure |
| Technology Partner | Axiom/Nexus APIs | NDA, API terms of use, DPA where data access is involved |
| Developer / API Consumer | NexGenomics APIs/SDKs | API terms of use, NDA where applicable, production security baseline |
Partners whose activities span multiple types must meet the most stringent obligations across every classification that applies to them.
Baseline Obligations, No Exceptions.
Every partner — regardless of type — commits to ethical conduct, data privacy and security consistent with NexGenomics's own standards, applicable regulatory compliance, transparency and record-keeping, and cascading these same requirements to their own subcontractors. Governance that stops at the first partner boundary isn't governance — it's a gap waiting to be found.
Enforcement Is Tiered — and It's in Writing.
| Tier | Trigger | Response |
|---|---|---|
| 1 — Advisory | Minor or first-time breach, no material harm | Written notice, 30-day cure period |
| 2 — Warning & Monitoring | Repeated or moderate breach | Formal warning, enhanced monitoring, 45-day cure period |
| 3 — Suspension | Material breach or security incident from partner negligence | Immediate access suspension pending investigation |
| 4 — Termination | Severe or deliberate breach, willful misconduct | Termination, credential revocation, potential legal action |
Partners know in advance what happens at each stage — enforcement isn't a surprise, and it isn't discretionary.
White-Label and Brand Representation.
Partners delivering NexGenomics technology under their own brand operate within defined rules for what can and can't be represented to end customers — including required attribution and end-customer transparency about the role NexGenomics technology plays in the service they're receiving.
See MSSP & MSP Program → See Reseller & VAR Program →
Governed to Go.
Stop rebuilding trust. Start building value.