Security your IT team can sign off.
The answers IT and procurement need, without a call: certifications, how data is handled, how AI uses it, and who sees what.
Certified and tested.
ISO 27001:2022Certified, with an information security management system we update every month.
GDPRBuilt for European data protection, with a DPA ready to sign.
Yearly pentestAn independent third party tests uman every year.
CIS BenchmarkOur infrastructure follows the CIS Benchmark.
How we handle your data.
The short version of what is in the security overview and the DPA.
Your data
- AES-256 encryption at rest and in transit
- No data shared with third parties
- Deleted on request, with clear retention periods
AI and your data
- Models get context, but are never trained on your data
- Every line uman writes is marked with a ✦
- You approve everything that goes out
Access
- Sign in with Google or Microsoft, no separate passwords
- CRM connections through OAuth
- Roles decide who sees what: Manager, Portfolio owner, Admin
Meetings
- The notetaker announces itself in the call
- Teams transcripts as an alternative to the notetaker
- Private meetings stay private
- Coaching only with the seller’s consent
Your CRM changes only with your OK.
uman prepares fields and visit reports and shows where it found each value. A person reviews and pushes. It never changes your CRM by itself.
The documents, after a short form.
Data processing agreementReady to sign.
Security overviewHow uman is built, run and monitored.
Pentest summaryThe results of the latest third-party test.