Trust & Security
Built for enterprise security
Unitity AI handles sensitive candidate and client data every day. Here's exactly how we protect it.
Data Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256 via Neon Postgres).
Infrastructure
Hosted on the Vercel Edge Network (99.99% uptime SLA), with our database on Neon — a SOC 2 Type II certified provider.
Access Control
Role-based access control, JWT authentication, and automatic session expiry protect every account.
API Security
Rate limiting on sensitive endpoints, HMAC-signed webhooks, and scoped API tokens for integrations.
Audit Logs
Every meaningful action is logged with the actor, timestamp, and tenant for full traceability.
Backups
Daily automated database backups with 30-day retention, so recovery is always an option.
SOC 2 Compliance
We are working toward SOC 2 Type II certification. Our infrastructure partners — Vercel and Neon — are already SOC 2 certified, giving our foundation a strong compliance baseline from day one.
Responsible Disclosure
Found a security issue? We want to know. Email us at security@unitityai.com and we'll respond promptly.