Nox stays within reach as you move through your dashboard. It uses saved workspace information and reviewed product guides to help you make progress.
Start a conversation
Nox is available to selected workspaces during its beta. A workspace owner must review and enable it in Settings.
- Open Settings → Nox. Review the selected provider, model, and data use before enabling it.
- Choose “Ask Nox” in the lower corner, or Nox in the dashboard header. You can hide the floating companion in Settings and keep the header shortcut.
- Ask a question. Nox automatically follows the page you are on and the conversation. Mention a site name or domain to ask about another site. If the target is unclear, Nox asks a short question in chat. Each answer links to the sources and relevant screens.
Try a specific question
You stay in control of changes
During the beta, Nox can propose starting a verification scan or canceling a scan that is still queued, when actions are enabled and your role permits it.
An answer never performs a change by itself. Choose “Review action,” check the site and allowance, then confirm the specific action. Reviews expire after five minutes and are checked again when you confirm. If the site, your permissions, or the relevant settings change, ask for a fresh review. A duplicate confirmation returns the original result.
Publishing, billing changes, installation changes, and configuration editing continue through their existing screens. Nox does not run arbitrary commands or browse websites on your behalf.
What Nox sends to the AI provider
Only after your workspace is enabled and you send a question, the backend prepares a limited context for the selected provider.
- Your question and up to four recent completed exchanges in that conversation.
- Relevant summaries of sites, scan status, scan coverage and finding titles, saved consent settings, and scan allowance available to your role.
- Reviewed StrongPrivacy guidance and links to the existing dashboard screens.
Raw visitor consent records, HAR investigations, cookie and storage values, raw request evidence, integration secrets, and unsaved form fields are excluded. Nox does not read your entire screen. Please avoid including sensitive personal information or credentials in a question.
Settings identifies the configured provider and model. Supported choices are OpenAI, Anthropic (Claude), or OpenRouter with a specified destination provider. Changing this choice requires a workspace owner to review it again. The provider’s contractual retention and processing terms apply; deleting a conversation from StrongPrivacy does not recall requests already sent to a provider. See the privacy policy and provider register.
Scan briefings
When it is switched on, Nox writes a short briefing as soon as a verification scan finishes.
A briefing appears on the scan itself and explains what the scan reached, what it recorded, and what is worth checking next. It is written automatically, without anyone asking, which is why a workspace owner has to opt in to it specifically and why the option is off until they do. If the option is off, no scan is ever sent for a briefing.
A briefing belongs to the workspace rather than to one person, so everyone who can read the scan can read it. It contains no questions and no conversation. It sees the same bounded scan summary a question would, a computed description of your saved consent configuration, and a comparison of finding and page counts with the previous completed scan. It expires on the same 30-day schedule as conversations and stays readable if the option is later switched off.
A weekly digest, where that option is switched on, does the same across the whole workspace once a week and appears on your dashboard. Nothing is emailed.
Regression alerts are the one thing Nox sends by email, and only when three things are all true: the option is enabled for the workspace, a workspace owner has turned the emails on in Settings, and a scan recorded more findings than the one before it. A first scan never sends mail, and neither does a routine one.
A privacy summary is a draft you ask for. It answers “what does this site collect, and what happens if I decline?” from your saved configuration and your last verification, as text you can edit and download. It describes what was recorded; it is not a statement that your site complies with anything.
A briefing is a reading of the evidence, not a verdict. It cannot start or change anything, and it is never a statement that a site is or is not compliant — the recorded evidence on the scan is the record.
History, limits, and availability
Your Nox history is private to your account within the current workspace.
Conversations expire 30 days after they start. You can delete them earlier from the history button. Turning Nox off preserves access to your history and deletion controls. Hiding the companion is a personal display preference; turning it off for the whole workspace requires an owner.
The beta includes 100 accepted questions per workspace per month, plus 60 scan briefings and 6 weekly digests, each metered separately so automatic work never uses up a question, resetting on the first day of the month in UTC. Failed and stopped responses count. Nox accepts up to five questions per minute per account, and one active response per conversation. If a response stops or times out, it is not automatically sent to a second provider.
If Nox is unavailable, the panel explains the next step. A workspace may still need an owner’s opt-in, the platform may be setting up its provider, the response service may be offline, or the monthly allowance may be used. Your existing dashboard tools remain available.