Data Flow
Customer data follows documented, tenant-scoped routes with access controls and audit records. The exact route depends on the enabled voice, messaging, AI and integration providers.
Trust Center
Transparent information about how Ufront handles data, security, and compliance.
Processing locations
Ufront's control plane is hosted in the EEA. Text AI responses are generated by AI providers selected by Ufront, which may process data outside the EEA under an applicable transfer mechanism. Voice, messaging and integration processing locations depend on the customer's configuration.
Encryption
Ufront uses TLS for data in transit, host and storage protections for data at rest, and envelope encryption for tenant secrets. Provider credentials are not stored as plaintext application values.
Data Processing Agreement
Data processing terms are available for services where Ufront acts as processor. Controller and processor roles are documented in the applicable agreement.
Retention & Deletion
Configurable retention policies per organization. Data subject rights (export, delete, DSAR) are supported through the portal.
Subprocessors
Current subprocessor and processing-location information is available to customers on request. Safeguards are assessed for the providers and configuration actually selected.
Incident Contact
Suspected security incidents can be reported at any time. Our team will assess and respond according to the applicable incident process. Contact us at:
security@ufront.eu