Security,
in the open.
Everything your IT, security and procurement teams need to review uman: our certifications, the documents, the controls we run and who processes your data.
Certified, tested and reviewed.
The frameworks uman is built and run by.
The documents, in one place.
Public documents open right away. The rest you get after a short request, under NDA where needed.
The controls we run.
What keeps your data safe, from the infrastructure to the meeting room.
- Data encrypted at rest with AES-256
- Data encrypted in transit
- Infrastructure hardened to the CIS Benchmark
- ISO 27001:2022 certified ISMS
- ISMS reviewed every month
- Access limited to authorised people
- Sign in with Google or Microsoft only
- CRM connected through OAuth
- Roles decide who sees what
- Yearly third-party penetration test
- Regular security assessments and audits
- An incident response plan in place
- Never trained on customer data
- Every line uman writes is marked with a ✦
- Nothing reaches your CRM without your OK
- The notetaker announces itself in the call
- Private meetings stay private
- Coaching shared only with the seller’s consent
Your data stays yours.
Who processes your data.
The third parties named in our Privacy Notice. The full list for the uman platform comes with the DPA.
Questions we get in every review.
Is uman ISO 27001 certified?
Yes. uman is certified to ISO 27001:2022, and we review our information security management system every month. The certificate is in the documents above.
Do you train AI models on our data?
No. Models get the context they need to prepare a meeting or write a follow-up, but your data is never used to train them.
Can uman change our CRM by itself?
No. uman prepares fields and visit reports and shows where it found each value. A person reviews and pushes every change.
How do people sign in?
With their Google or Microsoft account, so your own sign-in rules and multi-factor settings apply. There are no separate uman passwords.
Does the notetaker join every meeting?
Only the meetings you choose. It announces itself in the call, private meetings stay private, and Teams transcripts can replace it.
How do we get the DPA, pentest summary or security overview?
Press Request access and tell us which documents you need. We send them to your work email, under NDA where needed.
What changed lately.
- Certificationuman is ISO 27001:2022 certifiedOur information security management system is certified to the 2022 version of the standard, and reviewed every month.
- TestingYearly penetration test completedAn independent third party tested the uman platform. The summary is available on request.
- PolicyPrivacy Notice reviewedWe reviewed our Privacy Notice on January 16, 2025. Nothing changed in how we handle your data.
Request access to the security pack.
Tell us who you are and which documents you need. Anything not here? Ask our team in a call.