Security, privacy and trust

unoui applies proportionate safeguards to protect customer information and support responsible use of ARI™.

How we protect customer information

Security is considered across the service lifecycle, from the information collected during an assessment to hosting, access, delivery and deletion.

Our controls are designed for the current scope of the service and will be reviewed as unoui grows, its technology changes or new risks are identified.

Core safeguards

Encryption and secure hosting

The service uses HTTPS to protect information in transit. Production application functions and the primary database are configured in London, United Kingdom. Our hosting providers also apply encryption and infrastructure safeguards to their services.

Access control

Administrative access is limited to authorised users and protected through individual accounts and authentication controls. Access is reviewed and should be removed when it is no longer required.

Data minimisation

We aim to collect only the information needed to deliver the requested assessment, respond to enquiries and operate the service. Customers should not provide unnecessary special-category or highly sensitive personal data.

Where information is processed

ARI application functions run through Vercel in London (lhr1) and the primary Supabase project is hosted in London (eu-west-2). These suppliers also operate global networks and support services, so limited international processing may occur under their contractual transfer safeguards.

Website enquiries and recruitment records are stored in Supabase; CV files are held in a private storage bucket and are not publicly addressable. Business email is delivered through Zoho Mail. ARI does not currently send assessment responses to an external generative-AI model provider.

Security incidents and responsible disclosure

Suspected loss, unauthorised access, misuse or disclosure of customer information will be investigated and addressed proportionately. Where required, affected customers and the relevant regulator will be notified in accordance with applicable law.

To report a suspected security or privacy issue, email privacy@unoui.co.uk. Please do not include passwords, access tokens or unnecessary personal data in the initial message.

Transparency and assurance

unoui does not claim that this website or ARI is a certification of a customer's compliance, and we do not currently claim independent security certification for unoui. Customers may request further information about relevant safeguards, subprocessors and data processing arrangements.

See our Privacy Notice, Responsible AI approach and Website and Service Terms for more information.