Skip to content

Trust Center

Security & availability

Encryption in transit and at rest, identity and access management, network and API security, multi-zone availability and continuity plans: what Univerx is designed for so your customer service keeps running.

Designed forUpdated on 2 November 2026

At a glance

  1. Designed for

    The platform is built toward the requirement. Evidence such as an attestation does not exist yet – we name it as soon as it does.

  2. On request

    The documents exist. You receive them for your review through the contact form.

  3. Available

    Met and evidenced. We assign this level only once the evidence exists.

Documents on request
  • Technical and organisational measuresOn request

#Security as part of the architecture

A contact centre connects telephony, messaging, AI and your business systems. Every one of those connections is a potential point of attack. So Univerx treats security not as an add-on but as a property of the cloud architecture.

The platform is multi-tenant, with your data kept separate from other customers' data. Updates roll out continuously, without upgrade projects. Security fixes therefore reach every tenant without you having to start a project.

#Four layers of protection

LayerWhat it protectsHow
DataConversations, recordings, casesEncryption in transit and at rest
IdentityAccess for employees and administratorsRole rights, logging, central administration
Network and interfacesConnections to telephony, CRM and AINetwork security, secured APIs and integrations
OperationsThe running serviceMulti-zone availability, continuity plans, monitoring
Shared cloud, product families and the Europe layer. Schematic view.

#Identity and access

You decide who sees what in central administration: per role, per data type, per feature. A typical set-up: team leads see their team's analytics, administrators see the configuration but no conversation content.

During co-browse the platform masks sensitive fields such as account numbers or health details. The agent guides the customer through the form without seeing what is typed.

Interfaces to your business systems run through the developer platform. Roles and logs apply there too, designed so that every integration gets only the rights it needs.

#Availability and continuity

Customer service matters most when something else has failed. Univerx is designed for multi-zone operation: services run independently in several zones of a region, so the loss of one zone does not interrupt the service.

For larger events there are continuity plans. A public status page is planned so you can see the state of the services at any time. More under Resilience.

#What you set yourself

Security is a shared responsibility. Univerx runs the platform; you define roles, rights, retention periods and integrations. The main settings on your side:

Your settings

Roles and rights per team, reviewed regularly
Masking of sensitive fields in co-browse and forms
Retention periods per data type, following your retention and deletion policy
Every integration limited to the rights it needs
Contacts and reporting lines for an emergency

#Evidence

The technical and organisational measures are available on request. Univerx is designed for the BSI C5 criteria catalogue; we will name an attestation only once it exists.

For regulated companies, the NIS2 and DORA pages describe which documents Univerx contributes. The product page Security gives an overview of the features.

Products

Where the topic applies.

The product families this topic matters most for.

  • Univerx Cloud

    One cloud for every customer contact.

    • EU
    • BSI C5
    • NIS2
    Learn more
  • Univerx Trust Center

    Security and regulation as a design principle, not an appendix.

    • DSGVO
    • EU
    • AI Act
    • BSI C5
    • eIDAS
    • NIS2
    • DORA
    • BFSG
    Learn more
  • Univerx Marketplace & Developer

    Open to your system landscape, never an island.

    • DSGVO
    • NIS2
    Learn more

Trust & Europe

Every topic in the trust center.

Every topic carries a status. It tells you what is a design goal, which documents you can request and what is evidenced today.

Trust center topics with status, affected product families and number of documents on request
TopicStatus
GDPROn request
Data residency & hosting in GermanyDesigned for · German hosting planned
EU AI ActDesigned for
BSI C5Designed for · goal, no attestation
eIDAS & online IDDesigned for
NIS2Designed for
DORADesigned for
European Accessibility ActDesigned for · WCAG 2.1 AA as a goal
Responsible AIDesigned for · principles & controls
Security & availabilityDesigned for
United States: HIPAA, PCI DSS, SOC 2, TCPA, CCPADesigned for

Frequently asked questions

What availability do you commit to?

Availability is committed in the contract. The figure is in your contract's service description rather than on this page, because that is the only place it binds.

Is there a status page?

A public status page is planned. It shows the state of the services and any ongoing incidents. We share the address with the contract.

Who at Univerx can access our data?

Only people who need it to run the service, with a role and a log. Support access follows the data processing agreement; the details are in the technical and organisational measures.

What happens if a zone fails?

The platform is designed for multi-zone operation: if one zone fails, the others take over. For larger events there are continuity plans.

See Univerx on your own example.

In a demo we show the platform along your channels and requests, from AI agents to video, workforce scheduling and analytics.

Online, in German or English, with no preparation on your side.