Solarpunk Technology - Security Trust Center

Security, Privacy & Compliance Commitment

Solarpunk Technology is building Ubik with a security-first operating model for teams working with sensitive trade, customer, supplier, pricing, shipment, and operational data.

Ubik is designed as a reviewed decision layer above existing systems such as ERP, CRM, email, documents, meetings, and workflow tools. Every sensitive action is intended to remain human-reviewed, auditable, and traceable before it moves across customer operations.

Our privacy readiness work focuses on the Trust Services Criteria most relevant to our customers: security, availability, confidentiality, and privacy. We are implementing controls across access management, least-privilege permissions, authentication, audit logging, vendor review, incident response, change management, data protection, backup and recovery, and operational monitoring.

We do not use customer RFQs, supplier pricing, margins, contracts, shipment details, or operating records to train foundation models. Access is scoped, revocable, and limited to what is required for the approved workflow. Where AI systems are used, Ubik is designed to minimize exposed data, preserve human approval, and maintain a record of recommendations, actions, and outcomes.

Our goal is simple: help operators move faster without losing control. Ubik should make decisions more visible, approvals more accountable, and operating context more secure across the tools teams already use. Our aim is to be 100% compliant with no enterprise data to be ever used to train our models.

26

Policies

Internal policies that govern how we operate and protect customer data.

Encryption & Crypto Controls

Vendor & Third-Party Risk

Authentication & Password

Change & Release Management

Backup, Business Continuity & Disaster Recovery

Incident Response & Breach Notification

Access Control & Least Privilege

Retention & Secure Disposal

35

Controls

Safeguards continuously monitored across our infrastructure and processes.

Acceptable Use

Access Rights

Asset Inventory

Change management

Configuration & Patch Management

Credential Management

Data Privacy

Data Retention & Destruction

25

Subprocessors

Third parties that process data on our behalf under strict contractual safeguards.

Anthropic (API)

LLM API (Claude) processing prompts/outputs derived from customer content.

Azure Trusted Signing

Windows code-signing service. No customer data.

ChatGPT

ChatGPT is an AI language model developed by OpenAI capable of natural language understanding and generation.

Claude

Claude is an AI assistant developed by Anthropic to assist with various tasks.

Composio

Integration gateway routing customer data between SaaS systems.

Solarpunk Technology Trust Center

2

26

25

0

Security, Privacy & Compliance Commitment

Policies

Controls

Subprocessors