Text-only version of https://ultrassure.com/resources/answers/security-faq for AI assistants, LLM crawlers, search engines, and non-JavaScript clients. The interactive application loads for visitors with JavaScript enabled.
Ultrassure is SOC 2 Type II certified, encrypts all data with AES-256 encryption at rest and TLS 1.3 in transit, and never trains AI models on customer data. Data residency options include US, EU, and single-tenant deployments. Retention policies are configurable, and customers retain 100% ownership of their documents and extracted data.
Key Takeaways
- 1. SOC 2 Type II certified with annual audits by independent assessors
- 2. AES-256 encryption at rest, TLS 1.3 in transit for all data
- 3. No AI training on customer data—your documents improve only your instance
- 4. Data residency options: US, EU, or single-tenant deployment
- 5. Configurable retention policies with automated purge capabilities
- 6. SSO integration (SAML 2.0, OIDC) with role-based access control
- 7. Comprehensive audit logging for compliance and investigation
What Ultrassure Does
- • Maintains SOC 2 Type II certification with continuous monitoring
- • Provides customer-specific encryption keys for sensitive deployments
- • Offers single-tenant deployment for maximum isolation
- • Integrates with enterprise SSO providers (Okta, Azure AD, Ping)
- • Generates compliance reports for auditors and regulators on demand
Frequently Asked Questions
Does Ultrassure train AI models on my data?
No. Your documents and extracted data are never used to train AI models. Our models are trained on licensed datasets and synthetic data. Any instance-specific learning stays within your tenant and is not shared.
What is SOC 2 Type II certification?
SOC 2 Type II is an audit standard that verifies security controls are designed and operating effectively over time. Our certification covers Security, Availability, and Confidentiality trust service criteria with annual renewal.
Where is my data stored?
Default deployment is in US-based data centers (AWS). EU data residency is available for GDPR compliance. Single-tenant deployments can be configured in additional regions on request.
How long is data retained?
Retention policies are configurable by customer. Default retention is 7 years for extracted data and 30 days for uploaded documents (configurable). Automated purge ensures data deletion at policy expiration.
What happens to my data if I cancel?
Upon contract termination, you receive a full data export. After a 30-day grace period, all customer data is permanently deleted from production and backup systems with certification provided.
Does Ultrassure support SSO?
Yes. We support SAML 2.0 and OIDC for SSO integration. Common providers include Okta, Azure AD, Ping Identity, and OneLogin. Role-based access control maps to your existing groups.
How are API keys and credentials managed?
API keys are encrypted, rotatable, and scoped to specific permissions. Credentials never leave your environment. Integration with secrets managers (AWS Secrets Manager, HashiCorp Vault) is supported.
What audit logging is available?
Comprehensive audit logs capture all user actions, data access, configuration changes, and system events. Logs are immutable, exportable, and retained for compliance requirements.
Is Ultrassure GDPR compliant?
Yes. We provide Data Processing Agreements (DPAs), support data subject access requests, enable data portability, and offer EU data residency. Our practices align with GDPR requirements.
How do I report a security concern?
Security concerns can be reported to security@ultrassure.com. We maintain a responsible disclosure policy and respond to reports within 24 hours. Bug bounty details are available on request.
Related Resources
Detailed security documentation
Certifications and audits
Privacy practices and policies
Integration security
Ready to see it in action?
Request a demo to see how Ultrassure transforms your contract workflows.
Disclaimer: This content is provided for informational purposes only and does not constitute legal, financial, or professional advice. Please consult with qualified professionals for advice specific to your situation.
More from Ultrassure
- Ultrassure — Contract Certainty for the Business of Uncertainty — Insurance-native AI contract intelligence for carriers, MGAs, brokers, and reinsurers. Transform contracts into searchable intelligence with AI.
- AI Contract Intelligence Platform for Insurance Teams — Ultrassure turns insurance documents into searchable, structured intelligence for insurers, MGAs, brokers, and reinsurers, with extraction, semantic search, comparison, and governed review.
- Company | Ultrassure Insurance Contract Intelligence — Ultrassure builds AI contract intelligence software for insurers, MGAs, brokers, and reinsurers that need structured, searchable, evidence-linked contract operations.
- Request an Ultrassure Demo — Book a demo of Ultrassure, the insurance contract intelligence platform for insurers, MGAs, brokers, and reinsurers.
- Try Ultrassure Free — Start a free Ultrassure trial for AI-powered insurance document intelligence.
- Ultrassure FAQ — Answers to common questions about Ultrassure accuracy, security, implementation, document support, integrations, and pricing.
- Security at Ultrassure — SOC 2 Type II certified security, AES-256 encryption, TLS 1.3, RBAC, SSO/SAML, audit logging, and enterprise controls.
- Privacy Policy — Ultrassure privacy practices and data protection commitments.
- Terms of Service — Ultrassure terms and legal conditions.
- Ultrassure Trust Center — Security, compliance, privacy, reliability, subprocessors, legal resources, and trust documentation for Ultrassure.
- Trust Center — Compliance — SOC 2 Type II, GDPR, HIPAA readiness, CCPA, audit practices, and compliance resources.
- Trust Center — Privacy — Customer data privacy, model training policy, deletion rights, data residency, and privacy-by-design controls.
- Trust Center — Subprocessors — Third-party subprocessors used by Ultrassure and data processing commitments.
- Trust Center — Reliability — Uptime, SLA, monitoring, incident response, recovery objectives, and platform resilience.
- Trust Center — Legal — Master Services Agreement, DPA, BAA, SCCs, and enterprise legal resources.
- Trust Center FAQ — Security, privacy, compliance, and reliability questions for enterprise insurance buyers.
- Request Trust Center Access — Request access to Ultrassure security and compliance documentation.
- Ultrassure Resources — Buyer guides, case studies, answer pages, and practitioner resources for insurance contract intelligence.
- Insurance Contract Management Buyer Guide — Evaluation framework for AI contract intelligence platforms, pilots, ROI, security, and compliance.
- Treaty Renewal Case Study — How a global reinsurer reduced treaty renewal processing from 10–15 days to 2–4 days with Ultrassure.
- AI in Commercial Insurance Underwriting Guide — Practitioner guide to AI use cases in commercial insurance underwriting and contract certainty.
- Insurance Contract Intelligence Answers — Citation-ready answers for insurance contract intelligence, automation, clause mapping, renewals, compliance, and integrations.
- What Is Insurance Contract Intelligence? — Insurance contract intelligence transforms policies, slips, binders, treaties, endorsements, and schedules into searchable structured data.
- Binder vs Slip vs Policy vs Bordereau — Definitions and differences between common insurance placement and contract documents.
- How Automated Extraction Works — How AI extracts structured data from insurance documents with validation, confidence scoring, and audit trails.
- What Is Clause Mapping? — Clause mapping identifies, normalizes, compares, and tracks clauses across insurance contracts.
- Compare Contract Versions Quickly — How insurance teams compare expiring and renewal contracts, clauses, endorsements, and manuscript changes.
- Prepare Treaty Renewal Faster — How reinsurers and brokers accelerate treaty renewal preparation with contract intelligence.
- Improve Compliance Without Headcount — How automated compliance checks reduce manual review burden for insurance teams.
- Security FAQ for Contract Intelligence — Security questions enterprise buyers ask when evaluating AI contract intelligence platforms.
- Integrations FAQ — How Ultrassure integrates with policy administration, document management, data warehouses, BI tools, and APIs.
- Contract Intelligence vs CLM — How insurance contract intelligence differs from general contract lifecycle management software.
- Quota Share vs Excess of Loss Reinsurance: What's the Difference? — Quota share is proportional reinsurance sharing covered business by an agreed percentage; excess of loss is non-proportional reinsurance responding above a retention up to the treaty limit.
- What Is an I&L in Reinsurance? Interests and Liabilities Agreements Explained — An I&L, or Interests and Liabilities Agreement, records a subscribing reinsurer's participation in a reinsurance contract, including layer shares and its relationship to the underlying treaty.
- Ultrassure Blog — Articles on AI, insurance contract intelligence, underwriting operations, and document automation.
- Why Most AI Fails on Insurance Contracts — Why generic AI struggles with insurance contracts and how insurance-native contract intelligence improves reliability.
- Ultrassure vs Copilot GPT-5.1 Smart — Comparison of Ultrassure and general AI assistants for insurance contract intelligence workflows.
- Ultrassure Joins Creative Destruction Lab’s 2026/27 Risk Stream — Toronto-based insurtech Ultrassure has joined Creative Destruction Lab’s 2026/27 Risk Stream at the University of Wisconsin-Madison. Ultrassure is the AI system of intelligence for insurance, with more than $10 billion of platform premium flowing through the platform.
- Full Stack Engineer at Ultrassure — Career opportunity for a full stack engineer building insurance-native AI contract intelligence.
- Forward Deployed Engineer at Ultrassure — Career opportunity for a forward deployed engineer working with insurance teams and AI workflows.
- AI Engineer at Ultrassure — Career opportunity for an AI engineer building reliable document intelligence for insurance contracts.
- Founding Account Executive at Ultrassure — Career opportunity for a founding account executive helping insurance enterprises adopt Ultrassure.
- Millennium Insurance Selects Ultrassure — Press release: Millennium Insurance Corporation selects Ultrassure for AI contract intelligence.
- Pillar Capital Management Adopts Ultrassure for Contract Review Workflows — Customer announcement: Bermuda-based collateralized reinsurance and ILS manager Pillar Capital Management adopts Ultrassure for contract review and underwriting workflows. Covered by Artemis on September 17, 2026.
- Northern Re Expands Its Ultrassure Partnership — Press release: Northern Re expands its use of Ultrassure for treaty and contract intelligence.
- Ultrassure Support & Help Center — Support contact options, service level targets, and Trust Center resources for Ultrassure customers.
Full plain-text context for AI assistants: /llms-full.txt and /ai/sitemap.md.