Encryption.
TLS 1.2+ in transit, AES-256 at rest; OAuth tokens in a dedicated secrets vault.
SECURITY
Security built into every connection.
Encrypted tokens, tenant isolation, data residency options and a pass-through mode for sensitive objects. Here is how we protect your customers' financial data.
Controls, not slogans.
Isolation.
Every customer's data is logically separated and tagged by tenant at every layer.
Pass-through mode.
Choose objects that are never stored.
Access control.
SSO, MFA and least-privilege access for our staff, with logged, time-limited customer data access.
Monitoring.
Centralized logging, alerting and an incident response plan.
Compliance status.
Our current compliance status and documents are listed in the Trust center.
Owner-confirmed text only (CONTENT_STRATEGY §1.7 rule 6).
Security questions.
Where is data hosted?
Hosting provider and regions are listed in the Trust center, and we share details in a security review.
Do you sign DPAs?
Yes, on request for all paid plans.
How do I report a vulnerability?
Email security@unifyint.com and see the disclosure policy on the Trust page.
Do you use customer data to train AI models?
No. We do not train AI models on customer data.