Security and privacy
Security details should be specific and verifiable.
Security controls, data handling, and contractual commitments vary by product and engagement. This page does not claim a certification or a control that has not been documented and verified.
For the current privacy policy and legal terms, see Privacy and Terms. Those documents are pending review.
Topics to review during evaluation
Ask for product- and environment-specific evidence covering the areas that apply to your use case.
Identity and access
Confirm authentication, authorization, role and tenant boundaries, privileged access, and secrets handling for the selected service.
Data protection and AI flows
Confirm data location, encryption in transit and at rest, retention, export and deletion, provider processing terms, and handling of prompts, responses, logs, metrics, and traces. Do not assume that AI payloads are redacted, excluded from logs, or retained for zero days without configuration-specific evidence.
Operations and vulnerabilities
Confirm patch and vulnerability management, monitoring, audit records, incident response, and customer notification responsibilities for the product or engagement.
Backups and recovery
Confirm what is backed up, retention periods, encryption, restore testing, recovery time and recovery point objectives, and who performs each action. No recovery objective is promised on this page.
Responsibilities and support
Agree the shared responsibility boundary, support channel and hours, escalation path, service scope, and any service levels before work begins.
Send security questions to connect@unismarttech.com or contact our team.