This is a summary of how we protect UltraGIS and our customers' data. Additional technical details are shared with Enterprise customers under a non-disclosure agreement.
1. Encryption
All traffic is encrypted with TLS. Data at rest is encrypted in the database and file storage; personal data of subscribers and leads also uses envelope encryption with keys managed in a KMS and periodic rotation. The Custom plan can use its own keys.
2. Access and authentication
- Passwords hashed with Argon2id and checked against breached password lists.
- Two-step verification (TOTP) optional for everyone and off by default: each person turns it on in their profile, with backup codes and security keys (WebAuthn); the company administrator can require it per role or per user.
- Password recovery with a one-time code sent by email; no SMS or WhatsApp.
- SAML/OIDC SSO on the Enterprise plan; temporary lockout after failed attempts and a session limit.
3. Per-company isolation
Each company lives on its own subdomain and its data is separated in the database with per-company Row Level Security. Permissions apply per role and personal data is masked according to the role.
4. Auditing
Sign-ins, configuration changes, network publications and access to personal data are recorded in an immutable, hash-chained audit log verified daily.
5. Backups and continuity
Continuous database backup, copies in another account and region with immutable retention of up to 12 months and an automated restore drill every month. Targets: RPO under 1 hour and RTO under 4 hours.
6. AI assistant and MCP
The AI assistant advises and does not decide: it uses read-only tools and receives no personal data. Every MCP write requires a preview and a person's confirmation.
7. Incidents and reports
We have an incident response procedure with defined severities and times. If personal data is affected, we notify customers under the DPA. To responsibly report a vulnerability, write to soporte@ultragis.io.