Purpose

The purpose of this document is to ensure that clients and users understand how Unique manages data retention and deletion. By outlining our standard practices and acknowledging potential customizations, we aim to maintain transparency and meet diverse contractual requirements effectively. This document provides a comprehensive overview of our policies and procedures regarding the retention and deletion of data, focusing on both use cases: chat and recording. While it details our general principles, please note that individual setups may vary based on specific client contracts and needs.

Data Retention

Valid for chat and recording use cases

Unique's standard data retention period is 30 days, unless specified otherwise in the client's contract. This applies to all chat and recording data managed by our services.
No data is stored with Microsoft Azure Open.AI, and none of the data is used for AI model training or any other neural network training. This ensures that all client data remains secure and private, adhering to our commitment to data protection and confidentiality.
No data is shared in any way with the company Open.AI. The Azure Open.AI model is a model separately deployed within the Azure customer environment, completely separate from public Open.AI services
No data sent to or received from the Azure Open.AI model is stored for human review by Microsoft as we have an opt-out agreement with Microsoft
All data (including access rights) is deleted after the end of the POC
Data stored at Unique is deleted within 30 days after contract termination
Logging data will still be available for up to 1 year after contract termination, or longer if legally required for audit purposes.
Backups will be available for an additional 2 weeks after data is deleted.
Files will be available for an additional 30 days after they are deleted to be able to recover them in case of an accidental or malicious delete/overwrite
Unique ensures that all files are erased or anonymized upon final deletion after retention periods expire and that data in databases is not just marked as deleted but deleted from the database upon deletion. This applies to all data stored in Switzerland of the Microsoft Azure Cloud or another chosen location by the client for the duration of the contract or until the user manually deletes the data.

Chat use case only

A. Deletion of Users

TBD

B. Deletion of Logs

TBD

C. Additonal questions

Which data is stored? For how long?
Who can delete the data?
Analytics data: Analytics
Ingestion data: Ingestion
Spaces deletion: /wiki/spaces/~6380d17ede5cdaba3a682532/pages/514523152
Role deletion: Roles and Permissions

Deletion process at Unique

For specific deletion requests not covered in contract or above (e.g. GDPR-related request on personal data deletion), the customer may write an email to Unique CISO (michael@unique.ch) and request the manual deletion. Unique confirms via email once deletion is completed.

Backups

Unique’s databases run automatic backups to ensure rapid restoration of data when needed.
Unique’s backups have a RPO of 24 hours
Backups will be available for an additional 2 weeks after data is deleted (data deletion period is 30 days after contract ends).

Encryption in Place

Data in transit between the Unique service and Unique clients is encrypted using TLS 1.2+ protocol.
Encrytion at rest: For the Unique hosted single tenant, Unique lets Azure generate keys which are stored in the Single Tenants own Key Vault. These are HSM-backed (FIPS 140-2 Level 2) 4096 bit RSA keys. The keys are still stored in an Azure Key Vault but managed by Unique. The disks below are encrypted with FIPS 140-2 compliant AES256.
Encryption for Azure Backup: For Azure Backup, all backups are encrypted using customer-managed keys (CMK).

We couldn't find what you're looking for