Encryption.
TLS 1.2+ in transit, AES-256 at rest; OAuth tokens in a dedicated secrets vault.
TRUST CENTER
How we protect your customers' data.
Security controls, data handling, sub-processors and our current compliance status, in one place.
CONTROLS
The controls behind every connection.
Access control.
SSO, MFA and least-privilege access for our staff, with logged, time-limited customer data access.
Tenant isolation.
Every customer's data is logically separated and tagged by tenant at every layer.
Pass-through mode.
Choose objects that are never stored.
Monitoring and incident response.
Centralized logging, alerting and an incident response plan.
Compliance status.
We are documenting our security program and will publish audit status here. Ask us for our current security overview.
Data handling.
What we store. Connection metadata, OAuth tokens in a dedicated vault, and synced objects for anything you set to sync-and-store.
What we don't store. Objects you set to pass-through are fetched live on each request and never written to our store; only request logs are kept.
Retention. Log and audit retention follows your plan, as listed on the pricing page.
Deletion. Disconnecting a connection stops sync. Ask us to delete a connection's stored data and we confirm in writing when it is done.
Sub-processors.
| Vendor | Purpose | Location |
|---|---|---|
| Resend | Transactional email for website forms | United States |
| Plausible Analytics | Cookieless website analytics | European Union |
We update this list before adding a new sub-processor.
Vulnerability disclosure.
Report a suspected vulnerability to security@unifyint.com. We acknowledge reports within two business days (target) and won't pursue good-faith research that follows this policy: don't access more data than you need to show the issue, don't degrade service for others, and give us reasonable time to fix it before disclosure.
Trust questions.
Where is data hosted?
Our hosting provider and regions are listed in the sub-processor table once confirmed, and we share details in a security review.
Do you sign a DPA?
Yes, on request for all paid plans.
Do you train AI models on customer data?
No. Customer data is never used to train AI models.
How do you handle a breach?
We notify affected customers without undue delay, as required by contract and law, with what happened, what data was affected and what we are doing about it.
Can we run a security review?
Yes, on Scale and Enterprise plans.
Request security documents.
By submitting, you agree to our Privacy policy. We'll only use your details to reply.