Trust centre
How we protect your data and your customers' conversations in Gauntlet and UniCast, what is true today, and what is not done yet.
Last updated 31 October 2026.
What we protect
Gauntlet and UniCast hold your organisation's conversations with customers, your contacts and cases, your bot's knowledge, your videos and webinars, and the keys you give us to connect your channels. Your customers trust you with that information; you are trusting us with it.
How, in short
Each organisation kept apart
Every record belongs to one organisation. Automated checks try to read another organisation's data every 10 minutes and must be refused.
Secrets stay secret
Passwords and API keys are stored only as one-way hashes. The keys you give us for your channels are encrypted with a key unique to your organisation and are never shown back to anyone, including our staff.
You control access
Single sign-on, automatic user provisioning, roles with per-module permissions, and an audit log your admins can read.
We test ourselves
Our own platform runs 100+ automated checks every 10 minutes, and a full regression run every night.
Honest status
Gauntlet and UniCast are in public beta. We are a small, founder-run company. We do not yet hold a third-party security certification, we have not yet had an independent penetration test, and the service runs in a single hosting region. Our data processing agreement is a draft that is being finalised. We say this up front so you can decide with the full picture; each page below lists what is in place today and what is not.
In this trust centre
- Security practices: sign-in, encryption, access control, isolation, logging and what we do not have yet.
- Your data and our sub-processors: where data is processed, retention, erasure, export and the companies that process data for us.
- Accessibility statement: our WCAG 2.1 AA aim, captions and keyboard access, check results and known gaps.
- How we use AI: disclosure, hand-off to a person, answers from your own sources, video checks and how we test our own bot.
- Trust pack (PDF): all of the above in one document for your vendor file.
For a security questionnaire or a data-protection review, write to hello@unisonai.com. We answer questionnaires ourselves and will tell you plainly when the answer is "not yet".
Questions, questionnaires and reports
Send security questionnaires, data-protection questions, accessibility barriers or a suspected security issue to hello@unisonai.com. A person reads every message. Please do not send passwords or personal data you do not need to.