Upslide Trust Center

generated: '2026-07-21'
method: searched
probe: false
url: https://upslide.com/upslide-security/
description: >-
  UpSlide's security & compliance posture, captured from the public
  "UpSlide Security & Compliance" page (upslide.com/upslide-security/,
  retrieved 2026-07-21) and the help center's "Architecture and security"
  section. UpSlide is SOC 2 Type II certified (full report shared with clients
  on request) and ISO 27001 certified, backed by independent audits. The
  desktop add-in processes documents locally ("read-only add-in" — no
  documents, models or deal content stored on UpSlide servers); cloud
  endpoints run in UpSlide's Microsoft Azure tenant, with AI features on
  dedicated per-client Azure AI Foundry instances (zero data retention, no
  training on client data, per-feature model benchmarks). Communications use
  HTTPS/TLS 1.2 with AES-256 encryption. UpSlide is also a certified
  B Corporation (linked from upslide.com).
certifications:
  - name: SOC 2 Type II
    availability: full report shared with clients on request
    note: >-
      "SOC 2 Type II certified ... independently audited and operating
      effectively over time" (upslide.com/upslide-security/). Older support
      article "Security of UpSlide endpoints" also states "UpSlide is SOC-2
      compliant" (report via support@upslide.net).
  - name: ISO 27001
    note: >-
      "UpSlide is fully certified" against ISO 27001
      (upslide.com/upslide-security/, retrieved 2026-07-21). Note: the help
      center article "AI Security & Data Privacy" (updated 2026-05-27) still
      says "ISO 27001 certification coming soon"; the newer public security
      page states full certification.
  - name: B Corporation
    note: Certified B Corp (bcorporation.net listing "pyramid", linked from upslide.com footer).
security_practices:
  - Secure code reviews and code scanning before each release (SANS-based vulnerability rating)
  - Least-privilege access on Azure resources; secrets in Azure Key Vaults; delete locks
  - Azure Monitor / App Insights monitoring of endpoints
  - Dedicated per-client Azure AI Foundry; zero retention; prompts/completions not used for training
  - Auto-update over TLS 1.2 with AES-256 (autoupdate.upslide.net)
docs:
  - https://support.upslide.net/hc/en-us/sections/360004492639-Architecture-and-security
  - https://support.upslide.net/hc/en-us/articles/360015695439-Security-of-UpSlide-endpoints
  - https://support.upslide.net/hc/en-us/articles/360015693379-Security-of-UpSlide-software
  - https://support.upslide.net/hc/en-us/articles/26025072207004-AI-Security-Data-Privacy
  - https://upslide.com/upslide-security/
evidence:
  - source: https://upslide.com/upslide-security/
    keywords: [soc 2 type ii certified, iso 27001, independently audited, dedicated azure ai foundry, tls 1.2, aes-256]
  - source: https://support.upslide.net/hc/en-us/articles/360015695439-Security-of-UpSlide-endpoints
    keywords: [soc-2 compliant, azure, least privilege, key vaults]
  - source: https://support.upslide.net/hc/en-us/articles/26025072207004-AI-Security-Data-Privacy
    keywords: [soc 2 certification standards, iso 27001 coming soon, zero data retention]