Trust and security

Who you are dealing with

upstratus is operated by Intelligena LLC, a California limited liability company.

Questions about your account: support@intelligena.com

Where your data is held

Your data, and every backup, replica and cache of it, is held only within the United States and its territories. That includes copies held by our hosting, storage and content-delivery providers.

See which kinds of provider are involved

Encryption

• Traffic between you and the service uses TLS 1.2 or above. Plain HTTP is redirected, and HSTS is served.
• Databases, object storage and backups are encrypted at rest with AES-256 or equivalent.
• Application credentials are encrypted at rest and decrypted only into the memory of the process that needs them. Log output is redacted before it is written.
• We never receive or store a full payment card number; card details go directly to our payment processor.

Who can reach it

• Access to production data is limited to the people who need it to run the service, and is reviewed periodically.
• Administrative access to production systems requires multi-factor authentication and is by key, over an authenticated tunnel, from a restricted set of addresses.
• Development, test and production run on separate hosts with separate credentials. Production data is not copied into development or test.
• Databases are backed up on a schedule. Backups are encrypted, held in the same region, and restores are tested.

Your recordings and your models

We do not use your recordings to train, fine-tune or improve any third-party general-purpose or foundation model, and no provider of ours may do so. Under the Data Processing Addendum, a model trained for you on your own data is your content.

Read the Data Processing Addendum · Read the Privacy Policy

If something goes wrong

If a security incident affects personal data we process for you, we tell you without undue delay, and in any event within seventy-two (72) hours of becoming aware of it.

To report a vulnerability or a suspected incident, write to security@intelligena.com. We acknowledge reports within two business days, and we will not pursue a researcher who reports a finding to us privately, in good faith, and gives us time to fix it.