Text-only version of https://ultrassure.com/trust/compliance for AI assistants, LLM crawlers, search engines, and non-JavaScript clients. The interactive application loads for visitors with JavaScript enabled.
SUMMARY
- • SOC 2 Type II achieved (October 16, 2025)
- • GDPR, CCPA compliant with DPA and Standard Contractual Clauses available
- • HIPAA ready with Business Associate Agreement for healthcare organizations
Compliance overview
- Achieved October 16, 2025
- Standard contractual clauses available
- California Consumer Privacy Act compliant
- Business Associate Agreement available
- Configurable data retention policies
- EU region available upon request
Control mapping
How our controls map to common security questionnaire areas:
- Role-based access with principle of least privilege. MFA available for all users.
- AES-256 at rest, TLS 1.3 in transit. Keys managed via dedicated KMS with rotation.
- Comprehensive audit trail of user actions. Logs retained for 1 year minimum.
- Documented SDLC with code reviews, testing, and approval workflows.
- Documented runbooks with 72-hour breach notification commitment.
- DPAs with all subprocessors. Regular security assessments of critical vendors.
- Disaster recovery with < 4 hour RTO. Regular backup testing.
- Mandatory security training for all employees. Annual refreshers.
Framework details
We achieved SOC 2 Type II certification on October 16, 2025. Annual audits verify our security controls.
- Security, Availability, and Confidentiality trust criteria covered
- Independent third-party auditor verified controls
- Continuous monitoring and annual recertification
Details
GDPR
We comply with the General Data Protection Regulation for processing personal data of EU residents.
- Data Processing Agreement (DPA) available
- Right to access, rectification, and erasure supported
- Privacy by design principles applied
We comply with the California Consumer Privacy Act for California residents.
- Right to know what data is collected
- Right to delete personal information
- Right to opt-out of data sales (we do not sell data)
- Non-discrimination for exercising rights
HIPAA
We offer HIPAA-compliant configurations for healthcare organizations handling protected health information.
- Business Associate Agreement (BAA) available
- Administrative, physical, and technical safeguards
- Audit controls and access logging
- Encryption of PHI at rest and in transit
More from Ultrassure
- Ultrassure — Contract Certainty for the Business of Uncertainty — Insurance-native AI contract intelligence for carriers, MGAs, brokers, and reinsurers. Transform contracts into searchable intelligence with AI.
- AI Contract Intelligence Platform for Insurance Teams — Ultrassure turns insurance documents into searchable, structured intelligence for insurers, MGAs, brokers, and reinsurers, with extraction, semantic search, comparison, and governed review.
- Company | Ultrassure Insurance Contract Intelligence — Ultrassure builds AI contract intelligence software for insurers, MGAs, brokers, and reinsurers that need structured, searchable, evidence-linked contract operations.
- Request an Ultrassure Demo — Book a demo of Ultrassure, the insurance contract intelligence platform for insurers, MGAs, brokers, and reinsurers.
- Try Ultrassure Free — Start a free Ultrassure trial for AI-powered insurance document intelligence.
- Ultrassure FAQ — Answers to common questions about Ultrassure accuracy, security, implementation, document support, integrations, and pricing.
- Security at Ultrassure — SOC 2 Type II certified security, AES-256 encryption, TLS 1.3, RBAC, SSO/SAML, audit logging, and enterprise controls.
- Privacy Policy — Ultrassure privacy practices and data protection commitments.
- Terms of Service — Ultrassure terms and legal conditions.
- Ultrassure Trust Center — Security, compliance, privacy, reliability, subprocessors, legal resources, and trust documentation for Ultrassure.
- Trust Center — Compliance — SOC 2 Type II, GDPR, HIPAA readiness, CCPA, audit practices, and compliance resources.
- Trust Center — Privacy — Customer data privacy, model training policy, deletion rights, data residency, and privacy-by-design controls.
- Trust Center — Subprocessors — Third-party subprocessors used by Ultrassure and data processing commitments.
- Trust Center — Reliability — Uptime, SLA, monitoring, incident response, recovery objectives, and platform resilience.
- Trust Center — Legal — Master Services Agreement, DPA, BAA, SCCs, and enterprise legal resources.
- Trust Center FAQ — Security, privacy, compliance, and reliability questions for enterprise insurance buyers.
- Request Trust Center Access — Request access to Ultrassure security and compliance documentation.
- Ultrassure Resources — Buyer guides, case studies, answer pages, and practitioner resources for insurance contract intelligence.
- Insurance Contract Management Buyer Guide — Evaluation framework for AI contract intelligence platforms, pilots, ROI, security, and compliance.
- Treaty Renewal Case Study — How a global reinsurer reduced treaty renewal processing from 10–15 days to 2–4 days with Ultrassure.
- AI in Commercial Insurance Underwriting Guide — Practitioner guide to AI use cases in commercial insurance underwriting and contract certainty.
- Insurance Contract Intelligence Answers — Citation-ready answers for insurance contract intelligence, automation, clause mapping, renewals, compliance, and integrations.
- What Is Insurance Contract Intelligence? — Insurance contract intelligence transforms policies, slips, binders, treaties, endorsements, and schedules into searchable structured data.
- Binder vs Slip vs Policy vs Bordereau — Definitions and differences between common insurance placement and contract documents.
- How Automated Extraction Works — How AI extracts structured data from insurance documents with validation, confidence scoring, and audit trails.
- What Is Clause Mapping? — Clause mapping identifies, normalizes, compares, and tracks clauses across insurance contracts.
- Compare Contract Versions Quickly — How insurance teams compare expiring and renewal contracts, clauses, endorsements, and manuscript changes.
- Prepare Treaty Renewal Faster — How reinsurers and brokers accelerate treaty renewal preparation with contract intelligence.
- Improve Compliance Without Headcount — How automated compliance checks reduce manual review burden for insurance teams.
- Security FAQ for Contract Intelligence — Security questions enterprise buyers ask when evaluating AI contract intelligence platforms.
- Integrations FAQ — How Ultrassure integrates with policy administration, document management, data warehouses, BI tools, and APIs.
- Contract Intelligence vs CLM — How insurance contract intelligence differs from general contract lifecycle management software.
- Quota Share vs Excess of Loss Reinsurance: What's the Difference? — Quota share is proportional reinsurance sharing covered business by an agreed percentage; excess of loss is non-proportional reinsurance responding above a retention up to the treaty limit.
- What Is an I&L in Reinsurance? Interests and Liabilities Agreements Explained — An I&L, or Interests and Liabilities Agreement, records a subscribing reinsurer's participation in a reinsurance contract, including layer shares and its relationship to the underlying treaty.
- Ultrassure Blog — Articles on AI, insurance contract intelligence, underwriting operations, and document automation.
- Why Most AI Fails on Insurance Contracts — Why generic AI struggles with insurance contracts and how insurance-native contract intelligence improves reliability.
- Ultrassure vs Copilot GPT-5.1 Smart — Comparison of Ultrassure and general AI assistants for insurance contract intelligence workflows.
- Ultrassure Joins Creative Destruction Lab’s 2026/27 Risk Stream — Toronto-based insurtech Ultrassure has joined Creative Destruction Lab’s 2026/27 Risk Stream at the University of Wisconsin-Madison. Ultrassure is the AI system of intelligence for insurance, with more than $10 billion of platform premium flowing through the platform.
- Full Stack Engineer at Ultrassure — Career opportunity for a full stack engineer building insurance-native AI contract intelligence.
- Forward Deployed Engineer at Ultrassure — Career opportunity for a forward deployed engineer working with insurance teams and AI workflows.
- AI Engineer at Ultrassure — Career opportunity for an AI engineer building reliable document intelligence for insurance contracts.
- Founding Account Executive at Ultrassure — Career opportunity for a founding account executive helping insurance enterprises adopt Ultrassure.
- Millennium Insurance Selects Ultrassure — Press release: Millennium Insurance Corporation selects Ultrassure for AI contract intelligence.
- Pillar Capital Management Adopts Ultrassure for Contract Review Workflows — Customer announcement: Bermuda-based collateralized reinsurance and ILS manager Pillar Capital Management adopts Ultrassure for contract review and underwriting workflows. Covered by Artemis on September 17, 2026.
- Northern Re Expands Its Ultrassure Partnership — Press release: Northern Re expands its use of Ultrassure for treaty and contract intelligence.
- Ultrassure Support & Help Center — Support contact options, service level targets, and Trust Center resources for Ultrassure customers.
Full plain-text context for AI assistants: /llms-full.txt and /ai/sitemap.md.