Automated AI Workforce & Procurement FAQ

Everything You Need to Know About Deploying Nexuuscore

Learn how Nexuuscore is priced, how your data is protected, what integrations are available, and how quickly you can deploy your own AI workforce.

26 Procurement Questions • 6 Min Read • Updated August 2026

Pricing, Billing & Compute Credits

How is AI compute billed and what is included in my monthly subscription?

Nexuuscore operates a transparent commercial model designed for predictable budgeting:

  • Self-Serve Modules (Outreach and Digital): Monthly subscriptions starting at £299/month. Includes a monthly pool of Verified Lead Prospects & Outbound Executions, user seats, and automated workflow triggers.
  • Managed Enterprise Services (Shield, CallCentre): Operated directly on dedicated UK infrastructure. Contact sales to book a platform demonstration and receive a custom solution proposal.
What self-serve subscription plans are available?

We offer three transparent subscription tiers with full multi-seat access and clear resource bounds:

  • Starter (£299/mo): Includes Up to 100 Outreach-Ready Accounts / month (1,000 Credits @ 10 cr/account → £2.99/account effective rate) + 2 User Seats (~50 accounts/seat). Includes 90-day activity history & short video clips (≤4s).
  • Growth (£699/mo): Includes Up to 350 Outreach-Ready Accounts / month (3,500 Credits @ 10 cr/account → £1.997/account effective rate) + 5 User Seats (~70 accounts/seat). Includes 12-month activity history & standard video clips (≤10s).
  • Scale (£1,799/mo): Includes Up to 1,200 Outreach-Ready Accounts / month (12,000 Credits @ 10 cr/account → £1.499/account effective rate) + 15 User Seats (~80 accounts/seat). Includes custom approval workflows, permanent activity log, comprehensive 44-rule technical SEO audits & long video clips (≤30s).
Are the published subscription prices fixed or estimated?

All plan subscription prices (£299/mo, £699/mo, £1,799/mo) are fixed recurring contract fees. Each plan includes a monthly allocation of Platform Credits consumed at 10.00 Platform Credits per outreach-ready account (1 Enriched & Verified Account staged with custom pain hypothesis & multi-touch outreach = 10.00 Credits; outbound email dispatch up to 3 attempts is included at 0 extra credits).

Subscription Tier Fixed Monthly Price Monthly Credit Allocation Outreach-Ready Account Capacity (10 cr / account) Effective Rate / Account
Starter Plan £299 / month 1,000 Platform Credits Up to 100 Accounts £2.99 / account (£0.299 / credit)
Growth Plan £699 / month 3,500 Platform Credits Up to 350 Accounts £1.997 / account (£0.1997 / credit)
Scale Plan £1,799 / month 12,000 Platform Credits Up to 1,200 Accounts £1.499 / account (£0.1499 / credit)
Top-Up Credit Pack (Boost) £175 (one-time) 500 Platform Credits 50 Accounts (Lifetime) £3.50 / account (£0.35 / credit)
Top-Up Credit Pack (Growth) £450 (one-time) 1,500 Platform Credits 150 Accounts (Lifetime) £3.00 / account (£0.30 / credit)
Top-Up Credit Pack (Scale) £1,250 (one-time) 5,000 Platform Credits 500 Accounts (Lifetime) £2.50 / account (£0.25 / credit)

* All subscription credits are fungible and can be flexibly deployed across Outreach-Ready Accounts (10 cr), Market Dossiers (5 cr), SEO Audits (5 cr), Long-Form Articles (50 cr), or Video Studio clips.

Do unused credits roll over to the next month?

NexuusCore operates with monthly plan credits and lifetime top-up packs with distinct rollover rules:

  • Monthly Subscription Quota (Expiring): Your monthly plan allowance (1,000 / 3,500 / 12,000 credits) resets on each 30-day billing renewal date. Unused monthly subscription credits expire upon renewal and do not roll over.
  • Top-Up Credit Packs (Non-Expiring Lifetime Balance): Any credits purchased via one-time Top-Up Packs (500, 1,500, or 5,000 credits) never expire and roll over indefinitely for the lifetime of your active account.
  • Intelligent Split Deduction: When running workflows, our platform automatically consumes your expiring monthly subscription credits first, safeguarding your permanent top-up balance.
What happens if I reach my monthly quota of verified lead prospects?

Workflows never abruptly fail. If your monthly account allocation reaches zero, active outreach queues pause safely. You can purchase instant Top-Up Credit Packs (£175 for 500 credits, £450 for 1,500 credits, or £1,250 for 5,000 credits) directly inside your Billing dashboard, or upgrade to a higher monthly tier anytime for a lower effective rate per account.

Do I need a credit card to sign up, and how does the 14-Day Guarantee work?

Yes, payment details are collected at checkout to activate private workspace provisioning on our UK cloud infrastructure. The 14-Day 100% Money-Back Guarantee applies exclusively to first-time new client organisation subscriptions (limited to 1 guaranteed refund per organisation, payment card fingerprint, or IP address per 90 days to prevent abuse). If Nexuuscore does not deliver value for your business within your first 14 days and under 20% quota consumption, simply request a cancellation inside your Billing dashboard or email [email protected] for a full 100% refund, zero hassle (backed by Section 3 of our Terms of Service).

Does Nexuuscore charge a commission or success fee if we close a deal?

No. Nexuuscore charges 0% commission and zero success fees. You retain 100% of all contract revenue, sales pipeline value, and deal profits generated through platform intelligence, automated outreach, or closer pipeline proposals. Nexuuscore is purely fixed-fee B2B SaaS infrastructure: whether your team or autonomous agents close a £1,000 deal or a £100,000 enterprise agreement, your cost is strictly your fixed monthly subscription and standard compute credit consumption.

Deployment, Onboarding & Setup

How long does setup take and what happens after I sign up?

Self-serve workspace deployment takes less than 60 seconds on app.nexuuscore.io:

  • Step 1: Select your subscription plan (Starter £299 / Growth £699 / Scale £1,799) and complete payment.
  • Step 2: Your dedicated workspace is provisioned automatically with pre-configured AI approval rules and initial compute credits.
  • Step 3: Invite team members, configure human approval rules, and launch your first campaign in minutes.
Do you assist with data migration and existing prospect lists?

Yes. You can import existing lead files, CRM contacts, and brand guidelines via CSV upload or automated API synchronization. All imported records undergo automated deduplication, hygiene verification, and encryption at rest.

Integrations, CRMs & APIs

Which CRMs and business systems does Nexuuscore integrate with?

Nexuuscore integrates across enterprise productivity and sales stacks:

  • Email & Workspace: Microsoft 365, Google Workspace.
  • CRMs & Sales Pipelines: Native OAuth for HubSpot and Salesforce, plus signed HTTP Webhooks and Zapier for Pipedrive, Zoho CRM, and Dynamics 365.
  • Developer Tools: Webhooks, REST API endpoints, and Zapier integrations.
Do I need a Salesforce admin or developer to set this up?

No. You connect your Salesforce or HubSpot account via standard OAuth in under 3 minutes. Field mapping happens visually in your settings panel (e.g. mapping our ICP Lead Score to your custom CRM fields) with zero code or consulting required.

Will cold outreach get my company domain blacklisted?

Nexuuscore is engineered to protect your domain reputation while giving you complete volume control:

  • Deliverability Warm-Up Mode (Default): Ramps sending velocity gradually (25 emails/day cap) to protect new sending mailboxes and build sender reputation.
  • Custom Domain Freedom: If you are sending from an established, pre-warmed custom domain, you can disable Warm-Up Mode and scale outreach up to 1,000+ verified leads per campaign.
  • Pre-Send MX & SMTP Verification: Every email address is verified prior to dispatch to eliminate hard bounces and spam traps.
What happens if I approve an email and the prospect replies at 2am?

Prospect replies land directly in your normal connected inbox (or log straight into your CRM). Nexuuscore never auto-responds to live replies without your oversight, you or your sales team take over the conversation naturally.

Do you offer a REST API or Webhook triggers for custom workflows?

Yes. All self-serve tiers provide access to the Nexuuscore Gateway API. You can trigger lead searches, request automated market reports, or receive real time JSON Webhook notifications when outbound approval tasks are queued.

How does Nexuuscore evaluate outreach compliance?

Nexuuscore enforces multi-layered statutory compliance gates across all cold communication:

  • Legitimate Interest Assessment (LIA): Automated 3-part evaluations (Purpose, Necessity, Balancing) are persisted before campaign enrollment, rejecting consumer email domains.
  • Deterministic Provenance & Suppression: Outbound messages include verified public source citations (GDPR Art. 14) and 1-click unsubscribe links that instantly write to an immutable tenant-scoped suppression ledger.
  • Human Approval Gate: Cold outreach drafts are staged in a review queue requiring explicit human approval and held for 15 minutes after sign-off before transmission, allowing immediate revocation.
Can AI voice agents autonomously dial prospect phone numbers?

No autonomous cold dialing is permitted without human sign-off. Outbound telephony is a Managed Enterprise capability that strictly enforces dual-key operator authorization, TPS/CTPS screening, and an unalterable pre-rendered legal audio disclosure broadcast before bi-directional agent conversation begins.

What corporate information is required before launching an outreach campaign?

To eliminate spam and satisfy statutory requirements (including CAN-SPAM and UK PECR), workspaces must maintain a verified corporate legal entity name and an active physical operating postal address in their workspace settings. The platform hard-fails campaign creation if an address is missing, preventing placeholder fallbacks.

Security, Compliance & Data Residency

Where is my company data stored and does Nexuuscore train public models on it?

All Nexuuscore infrastructure is physically hosted in Private UK London Tier 3 data centers within the United Kingdom. We operate under a strict physical Zero-Training Pledge: your corporate data, prompts, and lead intelligence never touch public LLM training sets or third party AI providers.

What compliance frameworks, encryption standards, and data deletion policies do you enforce?

We enforce multi-layered enterprise defense controls:

  • Data Encryption: AES-256 encryption at rest and TLS 1.3 in transit across all internal service channels.
  • Governance & Privacy: Aligned with ISO 27001 ISMS principles, UK GDPR compliant, registered with the UK Information Commissioner's Office (ICO Registration No. ZC208682).
  • Audit Logging: Cryptographic audit logging records system transactions securely. Data encrypted under our field-level encryption scheme is rendered permanently unreadable on account termination by destroying the subject key (crypto-shredding).
Who inside Nexuuscore can access my data?

Access to the platform is governed by a strict Role-Based Access Control (RBAC) system enforced at the API layer. Internal staff roles carry explicitly scoped permissions, and Multi-Factor Authentication (TOTP) is mandatory for any privileged administrative or audit role.

Critically, all customer PII is encrypted at the application layer using per-tenant Field-Level Encryption (HKDF-SHA256 derived keys) before it reaches the database. This means that even internal staff with database access cannot read your plaintext data without the per-tenant cryptographic key. All access denial events are logged to an immutable audit trail in real time.

What happens if Nexuuscore suffers a data breach?

Nexuuscore maintains a formal Incident Response Plan (IRP) covering detection, containment, eradication, and recovery. In the event of a confirmed breach involving Personal Identifiable Information (PII):

  • Incident Escalation: Where NexuusCore acts as a processor, it notifies the relevant controller without undue delay after becoming aware of a personal data breach and provides available incident information to support the controller's statutory assessment and, where required, supervisory-authority notification.
  • Immediate Containment: Our platform includes technical controls for immediate session revocation, IP blocking, and instant agent shutdown via an emergency kill switch to limit exposure.
  • Post-Mortem: A formal root cause analysis report is produced within 48 hours of resolution for all Critical and High severity incidents, with corrective actions documented.
Can I access, export, or delete my data?

Yes. As a UK GDPR data subject, you have rights including the right to access, portability, rectification, and erasure of your personal data.

  • Subject Access Requests (SAR): Submit a statutory request to our dedicated Data Governance team at [email protected] with the subject line "UK GDPR Data Subject Request" (or via our universal catch-all at [email protected]). We will respond within the statutory 30-day period.
  • Data Export After Cancellation: Following account closure, you have a 30-day window to export your data. After 30 days, all data is permanently and irreversibly deleted from our systems.
  • During Active Subscription: To request deletion or export of specific data during your subscription, contact our support team. We will process requests in accordance with UK GDPR obligations.
  • Right to Lodge a Complaint: If you believe your data rights have not been respected, you may lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.
Is our data isolated from other customers on the platform?

Yes. Nexuuscore is a multi-tenant platform built with strict data isolation controls. Your data is separated from all other tenants through:

  • Strict Multi-Tenant Isolation: Each tenant's data is strictly segregated at the database layer with rigorous object-level access controls preventing cross-tenant data bleed across API endpoints.
  • Field-Level Encryption: All personal data is encrypted using Fernet (AES-128-CBC + HMAC-SHA256) with isolated HKDF-SHA256 per-tenant derived encryption keys before persistence.
  • Continuous Security Verification: Automated authorization and isolation tests are used to verify tenant boundaries across supported API access paths.
Who are your sub-processors and do you have a Data Processing Agreement (DPA)?

Nexuuscore uses a limited set of sub-processors, each with defined data access boundaries. A DPA is executed for each provider that handles customer data:

  • Dedicated UK Linux Host Infrastructure: Independent dedicated hypervisor and bare-metal hosting physically located in London, UK. Database (PostgreSQL 16 with Vector Indexes), cache (Redis Sentinel HA), immutable audit logs (MinIO S3 WORM Object Lock), secrets management (Platform Vault Fernet AES-128-CBC + HMAC-SHA256 & HKDF-SHA256 Field-Level Encryption).DPA: Executed.
  • Stripe: Subscription billing and payment processing.DPA: Executed.
  • Tailscale: Zero-Trust WireGuard network mesh (infrastructure only).DPA: Executed.
  • Enrichment & Verification Providers (Companies House, Apollo, Hunter, Serper): Corporate registry verification and professional contact enrichment, accessed via our secure enrichment pipeline with PII neutralisation applied before storage.DPA / Data Addendum: Executed.
  • Cloudflare: External HTTPS ingress proxy. All production traffic passes through Cloudflare Zero-Trust Tunnel.DPA: Executed (Standard DPA incorporating UK IDTA / SCCs), Cloudflare Trust Hub SOC 2 Type II report available on request.
  • SearxNG: Web discovery engine, self-hosted on Nexuuscore infrastructure. No data is transferred to any third party.

To request a copy of our Data Processing Agreement or sub-processor register, contact [email protected] or [email protected].

Does Nexuuscore conduct penetration testing?

Yes. Nexuuscore operates a continuous automated security testing regime as part of its platform architecture:

  • Continuous Security Audits: Automated security test suites audit authentication integrity, object access controls, privilege enforcement, and boundary traversal vectors across all client and administrative API routes.
  • Periodic external review: We conduct periodic security reviews and maintain an internal forensic audit log of all hardening actions.

Penetration test summary reports are available to enterprise clients under NDA. Contact [email protected] to request.

Does Nexuuscore process patient data or Special Category data?

No. Nexuuscore explicitly prohibits the submission of Special Category data (as defined under UK GDPR Article 9) and healthcare-specific regulated data classes to the platform.

Our Acceptable Use policy designates the following as Prohibited Data Classes that may not be submitted to the platform under any circumstances:

  • Protected Health Information (PHI): including patient records, clinical notes, or any health-related identifiers
  • Primary payment card numbers (PCI-DSS regulated data)
  • Government-issued identification numbers in unencrypted formats

Nexuuscore is designed strictly for B2B commercial operations: prospect identification, outreach, content generation, and customer phone reception. It is not designed or approved for processing patient health data, clinical records, or any data governed by healthcare-specific regulations.

What is your backup and disaster recovery capability?

Nexuuscore operates a multi-layer backup and recovery architecture:

  • Database & Vault backups: Automated PostgreSQL 16 and Vaultwarden snapshots run hourly via a dedicated backup container (db_backup_loop.sh) and stream directly to on-premises MinIO WORM Object Lock storage (AES-256 encrypted at rest; target RPO ≤ 1 hour, target RTO ≤ 1 hour for Vault / ≤ 4 hours for Database).
  • Local & WORM replication: The dedicated backup daemon continuously verifies and replicates snapshots to immutable MinIO object storage as a secondary copy.
  • Audit vault: Immutable compliance records are stored in MinIO S3 Object Lock (WORM compliance mode) with 7-year retention: these are unaffected by any recovery scenario.
  • Disaster recovery: A formal DR restoration procedure exists, including automated re-seeding of platform identity and core configuration post-restoration. Recovery procedures are tested as part of platform release gating.

For enterprise clients requiring specific RTO/RPO commitments, contact [email protected] to discuss SLA options.

Do you hold Cyber Essentials certification?

Not yet. Nexuuscore does not currently hold Cyber Essentials or Cyber Essentials Plus certification. We are actively working towards achieving Cyber Essentials certification.

In the meantime, our security posture includes controls that directly address the five Cyber Essentials technical domains:

  • Firewalls: All production traffic passes through Cloudflare Zero-Trust Tunnel. No backend services are directly internet-routable; direct public ingress is blocked.
  • Secure configuration: Docker images are pinned to SHA256 digests. No default or hardcoded credentials. Secrets managed strictly via Platform Vault (Fernet AES-128-CBC + HMAC-SHA256 with HKDF-SHA256 key derivation) and strict environment isolation.
  • User access control: RBAC enforced across all API endpoints. MFA mandatory for all privileged roles.
  • Malware protection: Dependency scanning (Dependabot, pip-audit) and container scanning (Trivy) are active in our CI/CD pipeline.
  • Patch management: Automated dependency updates and container image scanning are integrated into the release process.

We will update this page when certification is achieved. For procurement teams requiring a current security questionnaire, contact [email protected].

AI Architecture & Execution Controls

Can Nexuuscore be left to run fully autonomously?

We strongly advise against leaving any AI system to run 100% unsupervised.Human-in-the-Loop (HITL) governance exists for a reason, raw AI on its own still struggles with ambiguous contexts, edge cases, and high-impact decisions that require human judgment.

While Nexuuscore can automate repetitive background routines, we recommend operating under defined governance controls:

  • Observe & Assist (Modes 1–2): AI drafts research, content, or outbound plans, requiring explicit human signature before execution.
  • Approve (Mode 3: Recommended Default): AI stages actions in a pending queue awaiting single-click human authorization.
  • Auto-Execute (Mode 4): AI handles pre-approved routine tasks strictly within your designated budget caps and policy boundaries.
  • Escalate (Mode 5): If an anomaly, policy limit, or ambiguous scenario is detected, execution immediately pauses and defers to human oversight.
Can AI send emails or messages without my approval?

No. You maintain 100% human in the loop control. Outbound email drafts and sales communications pass through policy filters and are held in your dashboard's approval queue until explicitly confirmed by your team.

How does AI Quality Assurance ensure output accuracy and prevent hallucinated claims?

Every AI response is automatically checked for factual consistency, ungrounded statistics, missing citations, and compliance before delivery, executing an immediate rejection if standards are violated.

Which AI models does the platform use and can we run local or bespoke models?

Nexuuscore operates a hybrid model orchestration layer combining private UK hosted inference environments with enterprise LLMs. For Managed Enterprise clients, we deploy dedicated model clusters on private UK hardware infrastructure.

Commercial Terms, SLAs & Support

What are the contract terms, cancellation policy, and SLAs?

All self-serve plans operate on flexible month to month subscriptions with no Long Term contracts or lock-in. You can upgrade, downgrade, or cancel anytime directly in your account billing panel. Nexuuscore targets 99.5% platform availability measured on a monthly basis across active subscriptions, with custom contractual Service Level Agreements (SLAs) available on Managed Enterprise plans.

What support channels and response times are included?

Every account includes access to detailed documentation, system status telemetry, and ticketing support. Growth tier users receive priority email support, while Scale tier accounts include a dedicated Solutions Architect and custom Slack/Teams integration channel.

What is the company address, registration status, and contact phone number for Nexuuscore?

Nexuuscore Ltd (ICO Registration No. ZC208682, registered in England and Wales; see footer for company number) is headquartered at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. You can reach our team by email at [email protected] (or [email protected] / [email protected]) or by phone at 020 3892 2162.

What services does Nexuuscore offer, including specialized or managed services beyond self-serve plans?

In addition to self-serve subscriptions (Nexuus Outreach and Nexuus Digital & SEO Studio at £299-£1,799/mo), Nexuuscore provides specialized and managed enterprise services including: 24/7 Inbound & Outbound AI CallCentre (WebRTC/SIP Telephony), Public Sector Tender & RFP Bid Dossier Intelligence, Alpha Desk Commercial Real Estate (CRE) Underwriting, Compliance-as-a-Service (CaaS) API, and Managed Cybersecurity & Penetration Testing (Nexuus Shield).

Built for Organisations Requiring UK Data Residency

Designed for privacy-conscious businesses requiring verifiable AI compliance and data control.

UK Data Residency

Core infrastructure & AI models hosted in London data centres under UK jurisdiction.

Human Approval Controls

100% human in the loop review for all outbound communications.

AES-256 TLS 1.3

Bank-grade data encryption at rest and across all internal microservice channels.

Zero-Training Pledge

Your commercial data is never used to train public AI models.

Tamper-Evident Audit Trail

Cryptographic audit logging records all system transactions with regular asynchronous epoch sealing.

ICO Registered Data Controller

Official UK Information Commissioner's Office entry: ZC208682.

Ready to Deploy Your UK Hosted AI Workforce?

Get started in under 60 seconds with transparent credit metering, flexible monthly plans, and total data privacy.