Security & trust
Built for the most sensitive documents in insurance.
Treaties, policies and binders carry your most confidential terms. Ultrassure is designed, audited and governed accordingly.
Your data is never used to train models.
Customer contracts, prompts, outputs and embeddings are not used to train, retrain or fine-tune generally available or third-party foundation models. Customer data remains customer-owned.
Controls
Governed by default.
Single sign-on with your identity provider, including Microsoft Entra ID and Conditional Access.
Permissions scoped by team, workflow and document set.
Who acted, when, from where, and what changed.
AES-256 at rest and TLS 1.3 in transit.
Regional hosting where your obligations require it.
Limit access to approved networks and locations.
Every answer is tied to the clause behind it, so experts can verify.
Designed to support underwriting and legal judgment, never to replace it.
Trust Center
Everything procurement asks for, in one place.
Security FAQ
Questions buyers ask.
Yes. Ultrassure is SOC 2 Type II certified. Reports and procurement materials are available through the Trust Center.
No. Customer documents, prompts, outputs and embeddings are not used to train, retrain or fine-tune any foundation model.
You do. Customer data remains customer-owned, with deletion rights described in the Trust Center.
Data is encrypted at rest with AES-256 and in transit with TLS 1.3.
Yes. SAML SSO is supported, including Microsoft Entra ID and Conditional Access policies.
Yes. IP restrictions are available, and hosting region can be configured where required.
Yes. Every field and answer links to its source page and clause, and every action is recorded in the audit log.
Request access through the Trust Center for SOC 2 reports, DPA, MSA, subprocessors and policies.
Building the tools we wish we had as underwriters.
Make every promise provable.
No credit card required · Typically live in 10 business days