Trust Center
Trust, documented.
Security, privacy, resilience and responsible AI, plus the European frameworks Univerx is designed for. With a status per topic and the documents for your review.
Principles
Security, privacy, resilience, responsible AI.
The Trust Center brings together how Univerx protects data, avoids outages and governs AI, with the documents your audits need.
Security
Encryption in transit and at rest, identity and access control, network and API security, secure operations.
Privacy
Data ownership, region choice, sub-processor list, deletion and export functions, processing agreement under Art. 28 GDPR.
Resilience
Multi-zone availability, independent services, continuity plans; a public status page is planned.
Responsible AI
Transparency, human oversight, fairness, privacy and governance for every AI module.
Regulation in Europe & the US
GDPR, EU AI Act, BSI C5 as a target, eIDAS, NIS2, DORA, BFSG/EAA; in the US HIPAA, PCI DSS, SOC 2, TCPA, CCPA, documented as design goals.
Honest status
Three levels. Every statement named precisely.
Every topic carries a status. It tells you what is a design goal, which documents you can request and what is evidenced today.
- Designed for
The platform is built toward the requirement. Evidence such as an attestation does not exist yet – we name it as soon as it does.
10 topics
- On request
The documents exist. You receive them for your review through the contact form.
1 topic
- Available
Met and evidenced. We assign this level only once the evidence exists.
No topic yet
Univerx names certifications only once they exist. Until then it says "designed for" and "on request".
Overview
Every topic at a glance.
Each topic with its status, the product families it matters most for and the documents you can request.
| Topic | Status | Cloud | Contact Center | AI | Workforce | Journeys | Outbound | Marketplace & Developer | Trust Center | Documents |
|---|---|---|---|---|---|---|---|---|---|---|
| GDPR | On request | Cloud: relevant | Contact Center: relevant | AI: relevant | Workforce: relevant | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | 5 documents |
| Data residency & hosting in Germany | Designed for · German hosting planned | Cloud: relevant | Contact Center: relevant | AI: relevant | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | 3 documents |
| EU AI Act | Designed for | Cloud: not in focus | Contact Center: relevant | AI: relevant | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | Answered in a call |
| BSI C5 | Designed for · goal, no attestation | Cloud: relevant | Contact Center: not in focus | AI: not in focus | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | Answered in a call |
| eIDAS & online ID | Designed for | Cloud: not in focus | Contact Center: relevant | AI: not in focus | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | Answered in a call |
| NIS2 | Designed for | Cloud: relevant | Contact Center: relevant | AI: not in focus | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | 4 documents |
| DORA | Designed for | Cloud: relevant | Contact Center: relevant | AI: relevant | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | 5 documents |
| European Accessibility Act | Designed for · WCAG 2.1 AA as a goal | Cloud: not in focus | Contact Center: relevant | AI: relevant | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | Answered in a call |
| Responsible AI | Designed for · principles & controls | Cloud: not in focus | Contact Center: not in focus | AI: relevant | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: not in focus | Trust Center: relevant | Answered in a call |
| Security & availability | Designed for | Cloud: relevant | Contact Center: not in focus | AI: not in focus | Workforce: not in focus | Journeys: not in focus | Outbound: not in focus | Marketplace & Developer: relevant | Trust Center: relevant | 1 document |
| United States: HIPAA, PCI DSS, SOC 2, TCPA, CCPA | Designed for | Cloud: relevant | Contact Center: relevant | AI: relevant | Workforce: not in focus | Journeys: relevant | Outbound: relevant | Marketplace & Developer: not in focus | Trust Center: relevant | 6 documents |
Regulation in Europe & the US
EU data residency
Operated in EU regions, hosting in Germany planned. You choose the region; designed so that data and media stay in it.
- EU regions for data and media
- Hosting in Germany as a target
- Transparent sub-processor list
- Data export and portability
German specifics
Quality and performance analytics designed for co-determination (§ 87 (1) no. 6 BetrVG)
Call recording only with consent
Outbound campaigns with consent checks designed for § 7 UWG
Accessible customer interfaces as a goal (WCAG 2.1 AA, EN 301 549)
eIDAS
Identity under eIDAS
The Univerx Channel is designed for identification with the German online ID card and for eIDAS signatures, instead of ID copies and selfies.
- Online ID card (eID)
- eIDAS signatures
- Prepared for the EUDI wallet
- Record in the case
Documents
What your review needs.
Data processing, supply chain, operations: the topic pages name these documents. You receive them on request – for your tender, your register of information or your data protection impact assessment.
- Technical and organisational measuresOn requestGDPRNIS2DORASecurity & availability
- List of sub-processorsOn requestGDPRData residency & hosting in GermanyNIS2
- Retention and deletion policyOn requestGDPRData residency & hosting in Germany
- List of sub-processors with locationsOn requestDORAUnited States: HIPAA, PCI DSS, SOC 2, TCPA, CCPA
- Data processing agreement (Art. 28 GDPR)On requestGDPR
- Documents for the data protection impact assessmentOn requestGDPR
- Description of data export and portabilityOn requestData residency & hosting in Germany
- Description of incident reporting linesOn requestNIS2
- Information for your supplier assessmentOn requestNIS2
- Service description with service levelsOn requestDORA
- Information for your register of informationOn requestDORA
- Description of export and data returnOn requestDORA
- Security whitepaperOn requestUnited States: HIPAA, PCI DSS, SOC 2, TCPA, CCPA
- Business Associate Agreement (template)On requestUnited States: HIPAA, PCI DSS, SOC 2, TCPA, CCPA
- Description of the payment flow with recording pauseOn requestUnited States: HIPAA, PCI DSS, SOC 2, TCPA, CCPA
- Description of consent and do-not-call list managementOn requestUnited States: HIPAA, PCI DSS, SOC 2, TCPA, CCPA
- Description of access, deletion and opt-out handlingOn requestUnited States: HIPAA, PCI DSS, SOC 2, TCPA, CCPA
See Univerx on your own example.
In a demo we show the platform along your channels and requests, from AI agents to video, workforce scheduling and analytics.
Online, in German or English, with no preparation on your side.