generated: '2026-07-21'
method: searched
source: https://ujet.cx/security
description: >-
  Compliance and standards posture UJET publishes on its security page and in
  its site llms.txt. UJET publishes no public API reference or OpenAPI (its
  developer hub at ujet.readme.io and its Zendesk help center are login-gated),
  so technical API-convention standards (OAuth2, RFC 9457, pagination,
  idempotency) cannot be asserted either way from public material and are not
  listed. The entries below are the provider's own published compliance claims.
standards:
  - id: soc2
    conforms: true
    evidence: 'https://ujet.cx/security — "SOC 2, independently audited annually".'
  - id: iso27001
    conforms: true
    evidence: 'https://ujet.cx/security — ISO 27001 data-protection certification.'
  - id: hipaa
    conforms: true
    evidence: >-
      https://ujet.cx/llms.txt — "Enterprise security and compliance including
      SOC 2, HIPAA, and PCI"; https://ujet.cx/ujet-for-healthcare markets
      HIPAA-compliant support for healthcare.
  - id: pci-dss
    conforms: true
    evidence: >-
      https://ujet.cx/llms.txt — "Enterprise security and compliance including
      SOC 2, HIPAA, and PCI".
  - id: gdpr
    conforms: true
    evidence: >-
      Published Data Processing Agreement at
      https://ujet.cx/data-processing-agreement; CRM-native, no-PII-retention
      architecture described at https://ujet.cx/security.