Security at Uxia.
Your research data stays yours.
Uxia is built to protect your research, your participants and your company’s data. Your data is encrypted, hosted in the EU or the USA, and never used to train AI models.
Trusted by leading teams
Certifications
and compliance.
Independent standards and regulation guide how we protect your data and your participants.
ISO 27001
AuditedInformation security managed following ISO 27001 practices.
SOC 2
In progressSecurity controls built around the SOC 2 trust principles.
GDPR
CompliantGDPR compliant, with documented consent from every participant before a session starts.
Security built
into the platform.
The controls your security team expects, from encryption and data residency to SSO and audit logs.
Encrypted data
Your research data is encrypted, from the studies you set up to the recordings and reports they produce.
EU and US hosting
Choose where your data lives: Uxia is available for hosting in both the EU and the USA.
No training on your data
We never use client data to train models, as stated in our terms. You own every input and output.
Single sign-on
SSO with any SAML 2.0, OIDC or OAuth 2.0 identity provider.
SCIM and JIT provisioning
Add and remove users automatically with SCIM and just-in-time (JIT) provisioning.
Audit log trails
Keep a trail of the activity in your workspace with audit logs.
A security programme
across the company.
Our Information Security Policy sets who is responsible for security, how we manage risk and how we keep improving.
Owned by leadership
Ultimate responsibility for security lies with our executive team, which manages its development and implementation.
Risk management
Management analyses the risks and vulnerabilities that could affect the service and sets the measures to mitigate them.
Training and awareness
Everyone at Uxia follows our security training and awareness plans and the standards that apply to their work.
Business continuity
Security covers the whole cycle, from protection and prevention to detection, response and recovery.
Continuous improvement
We are committed to continuously improving every security process, across every team.
Speak Up channel
Anyone can report misconduct confidentially through our Speak Up channel. Open the channel
Found a vulnerability?
Tell us privately.
We welcome reports from independent security researchers. Please report potential issues to us privately, and don’t disclose them publicly until we’ve had a chance to investigate and fix them.
