Security and data handling
Where Unimode runs
Unimode Catalog Enrichment runs entirely on AWS. Its service, storage and your working copies are in the US East (N. Virginia) Region (us-east-1). Product text and images are analysed with Amazon Bedrock through its global cross-region inference, which may process a model request in another AWS Region; Bedrock does not store or use the content to train models.
How Unimode reaches your data
- Through a role you create in your own AWS account from our CloudFormation template. It allows reading one input folder and writing one output folder that you choose, and nothing else.
- The role can be assumed only by Unimode's service, and only with an external ID unique to your workspace, which prevents another Unimode customer from directing Unimode at your account.
- Each time Unimode assumes the role, it is recorded in your account's CloudTrail (and object reads and writes too, if you enable S3 data events).
- You can revoke access at any time by deleting the stack; you can rotate the external ID through the API.
What Unimode keeps, and for how long
- During a run, Unimode keeps working copies: the staged feed, the results and processing records.
- These copies are deleted 30 days after the run finishes (every stored
version), or sooner on request to support@unimode.ai. The run then shows as
expired. - Results delivered to your bucket are yours; Unimode never changes or deletes them.
- Billing and usage records (counts and costs per run, no product content) are kept.
Protection
- All traffic is encrypted in transit (TLS 1.2 or later), and data is encrypted at rest.
- API keys are shown once and stored only as hashes; contact support to revoke one.
- The API is protected by a web application firewall and rate limits.
- Access by Unimode staff to production requires single sign-on with two-step verification and is logged.
No personal data
Unimode Catalog Enrichment processes product catalog data only. Customers must not include personal data (information about an identifiable person, such as names, email addresses, phone numbers, postal addresses, order or account data) in feeds, images or any other content submitted to the service.
Security incidents
If an incident affects your data, Unimode notifies you by email as soon as it is confirmed, and within 3 calendar days at most, with what happened, what was affected, what we have done, and what you should do.
Contact
Security questions and reports: support@unimode.ai.