How UltraWeb AI handles security, privacy, and your data.
Every customer runs in their own private container with their own filesystem, their own credentials, their own memory. Customers cannot see each other's data — it's enforced at the OS level, not just access control rules.
AES-256-GCM for stored data (your conversations, OAuth tokens, memory). TLS 1.3 for everything in flight. HTTPS-only with HSTS. Per-customer gateway tokens with strong randomness.
Your conversations and memory are yours. We don't aggregate them, we don't ship them to model providers for training, we don't analyze them for product insights. They live in your container, encrypted, and that's it.
When you connect your ChatGPT subscription via OAuth, your inference runs on your account, with your tokens, billed to your subscription. We never see your OpenAI/Anthropic credentials.
Gmail, Calendar, Microsoft 365, Slack — all integrate via OAuth. We hold refresh tokens, not passwords. You can revoke access from your Google/Microsoft account at any time and we lose access immediately.
Cancel and we hand you a tar.gz export of your full workspace, memory, and skills configuration. Then we delete everything within 30 days. No retention beyond that. No backups beyond 90 days.
Our team only accesses customer infrastructure for support tickets you've filed, with audit logging. We can't read your conversations or memory without unsealing — which leaves a record.
SOC 2 Type II audit kickoff in late 2026. HIPAA-eligible deployment available as a custom-engineering engagement. GDPR Data Processing Addendum available on request.
Questions about how we handle your specific data or compliance requirements?
support@ultraweblabs.com