Security

#Security in layers

Security is not a single feature but a set of layers that work together. If one fails, the others hold. Univerx is built so that each layer can be checked on its own: the data, the identities, the interfaces and operations.

The Trust Center describes the measures in detail under Security & availability. This page shows what is visible in the product and what you configure yourself.

#Four layers

Data. Calls, messages, recordings and documents are encrypted in transit and at rest. The platform is designed so that media stays in the region you choose for your tenant.

Identities. Sign-in runs through your identity provider via single sign-on, with multi-factor authentication if you wish. Roles follow least privilege: everyone sees only what their task requires.

Interfaces. API keys have limited rights, can be revoked at any time and are logged. Embedded components such as the chat window talk only to the services they need.

Operations. Continuous monitoring, structured vulnerability management and a defined process for security incidents, including informing those affected.

#What you set yourself

Each of these settings is logged with time and person. In an audit you can show who changed what and when.

#Evidence and frameworks

Univerx is designed for the BSI C5 criteria catalogue. We will name an attestation only once it exists. For organisations under NIS2 or DORA, we provide supply-chain and third-party risk documents on request.