Dex is an AI-assisted personal CRM for individuals and professionals rather than sales teams. It centralises contacts, interaction history and follow-up reminders, and populates itself by syncing from email, calendar, LinkedIn and messaging channels. AI features include an in-product assistant (marketed as Dex Copilot / Nexus AI) that summarises relationship history, drafts introductions and messages, prepares pre-meeting briefs, suggests follow-ups, proposes duplicate merges and organises contacts into groups and custom fields. Delivered as a cloud SaaS product with web, iOS, Android, desktop and browser-extension clients, plus an API, an MCP server and an agent skill that allow external AI assistants to read and write CRM data. Catalogued from https://getdex.com/app.

Dex is developed by Dana HQ Inc.

Dex — EU AI Act & GDPR Transparency Score

Transparency Score

45%

Limited transparency

Supply Chain

0/20

Compliance

10/20

Policy

25/25

Technical

0/25

Ethical & Operational

10/10

Capabilities

Contact Management

Relationship Intelligence

Automated Data Entry

Reminder Scheduling

Message Drafting

Meeting Preparation

Summarization

Integration Sync

Vendor Information

Complete information about the vendor/provider of this AI application

Company Name

DexView all products →

Legal Entity

Dana HQ Inc(Trading as: Dex)

Contact Information

Website

getdex.com

legal@getdex.com

Registered Address

340 S Lemon Ave, #7240, Walnut, CA, 91789, US

EU AI Act Provider Information

Verification Status:

Partially Verified

(Last verified: August 1, 2026)

Legal Entity

Dana HQ Inc(Trading as: Dex)

Registered Address

340 S Lemon Ave, #7240, Walnut, CA, 91789, US

Contact

legal@getdex.com

Compliance Documents

CE Marking: Not Applicable

Instructions for Use

Potential Risks

1 considerations identified

Review recommended before use

These considerations are automatically identified based on publicly available information about the vendor and AI catalog data. Actual risks may vary based on your specific use case and implementation.

Policies & Documents

Legal, privacy, and compliance documentation

Legal & Terms

Dex Terms of Service

Last modified 2022-02-08, over four years older than the Privacy Policy. Liability capped at fees paid in the preceding 12 months; no warranty of privacy or security; references an Acceptable Use Policy that is not separately published.

Privacy & Security

Dex Privacy Policy

Last modified 2026-07-23. Dana HQ Inc acts as Data Controller. Covers Google API Limited Use commitments, third-party platform integrations, MCP/AI assistant data sharing, US-only hosting and a named list of service providers.

Dex Security and Privacy page

Security Policy

Marketing-level security page, not a formal policy. States TLS in transit, AES-256 at rest, US hosting and regular backups. Important caveat: the SOC 2 and ISO 27001 badges refer to the hosting providers, not to Dana HQ Inc. No audit report, pen-test summary or trust centre is offered.

Other

Dex product documentation

Other

Product documentation covering account creation, LinkedIn sync, Gmail sync, the Chrome extension and mobile apps. Registered as instructionsForUseUrl on the vendor record.

Vulnerability Disclosure Programme (intake form)

Other

Vulnerability Disclosure Programme intake, operated as a Google Form linked from the site footer. Returns HTTP 401 to unauthenticated access, so the form contents and any disclosure terms or safe-harbour language could not be reviewed. No security.txt, dedicated security contact or bug bounty was found.

Compliance & Risk

Get insights into risk by running assessments on this AI application.

Data Categories

Types of data commonly processed by this application

Pii

Contact Details

Communication Metadata

Email Content

Calendar Events

Social Profile Data

Conversation Logs

User Content

Additional Information

Source Url: https://getdex.com/app
Review Notes: Vendor record created 2026-08-01 (Dana HQ Inc). Sub-processors, data residency and the AI model providers behind the assistant features remain unconfirmed.
Vendor Record: created
Discovery Method: manual_web_discovery
Source Page Title: Home | Dex
Verification Status: partially_verified

Added: July 31, 2026

Updated: August 1, 2026

EU Alternatives

Discover EU-based alternatives for this AI application.

Browse all EU alternatives

Ready to manage AI applications?

Track, assess, and govern your AI applications with Anove.

Post-Market Monitoring

No public status page, SLA, incident-history page or breach-notification commitment was found. Availability is described only as commercially reasonable efforts. A Vulnerability Disclosure Programme exists but is operated as a Google Form intake (link in the site footer) rather than a security.txt, dedicated security contact or bug bounty; the form returns 401 to unauthenticated fetches and could not be reviewed. Product changes are communicated through a public changelog and a feedback/roadmap portal. Regulation CF annual reporting to the SEC lapsed after the FY2022 Form C-AR, so no current audited or self-reported financial monitoring is available.

Known Limitations

Open items from the 2026-07-31 desk review: (1) SOC 2 and ISO 27001 are claimed for the hosting providers, not for Dana HQ Inc itself; no vendor-held certification, audit report or pen-test summary is published. (2) The Terms of Service were last modified 2022-02-08 while the Privacy Policy was updated 2026-07-23, so the contractual layer lags the privacy layer by more than four years. (3) No public DPA, standard contractual clauses, sub-processor register with change notification, or GDPR Article 27 EU representative. (4) All hosting is stated to be in the US, with no EU data residency option; international transfers are described generically. (5) Micro-entity concentration risk: 2 employees and roughly 18 months of runway at the last public filing (Feb 2023), negative equity, funded via SAFEs and Reg CF. (6) Liability is capped at fees paid in the preceding 12 months and the Terms expressly disclaim any guarantee of privacy or security. (7) Third-party advertising networks collect web-behaviour data on the marketing site; Google user data is ring-fenced from advertising, but the position on other synced data is less explicit. (8) No registered patents or trademarks; IP rests on trade secrets. (9) The registered address is a suite-number mail-forwarding style address rather than an operating office. (10) The underlying AI model providers behind the assistant features are not publicly named.