Trust Center
E1 Unico Corporation is committed to protecting your data and your clients' data. Everything you need to verify our security posture is right here.
Security & Compliance Documents
All policies are reviewed annually. PDF versions are available for regulatory and compliance submissions.
Information Security Policy
Our comprehensive framework for identifying, mitigating, and monitoring information security risks across all systems.
Access Controls Policy
How we restrict access to production assets and sensitive data using RBAC, zero trust, MFA, and automated de-provisioning.
Multi-Factor Authentication (MFA) Policy
Phishing-resistant MFA enforcement across all critical systems that store or process consumer financial data.
Vulnerability Management Policy
Our continuous scanning, defined SLA patching schedule, and end-of-life software management program.
Data Retention & Disposal Policy
How long we retain each data type, secure deletion procedures, and compliance with GLBA, TCPA, and Texas privacy law.
Privacy Policy
How we collect, use, and protect your data — including Plaid bank account data, SMS consent, and your rights.
Terms of Service
The terms governing your use of the UnicoOS platform provided by E1 Unico Corporation.
Security Controls at a Glance
Encryption in Transit
TLS 1.3 enforced on all connections to unicoos.app
Encryption at Rest
AES-256 for all data including Plaid financial records
Authentication
Phishing-resistant MFA required for all admin accounts
Access Control
RBAC with least privilege + zero trust architecture
Bank Data (Plaid)
OAuth only — we never see or store your bank credentials
Payments (Stripe)
PCI DSS Level 1 — card data never touches our servers
Vulnerability Scanning
GitHub Dependabot + CodeQL on every commit
Incident Response
Critical vulnerabilities patched within 24 hours
Data Isolation
Multi-tenant database partitioning — zero cross-account access
Secret Management
All credentials in encrypted env vaults — never in code
Certified Infrastructure Partners
UnicoOS is built on a foundation of SOC 2 certified, industry-leading service providers.
Plaid
Bank account linking
PCI DSS · SOC 2
Stripe
Payment processing
PCI DSS Level 1
Vercel
Application hosting
SOC 2 Type II
Neon
Database
SOC 2 Type II
Twilio
SMS & Voice
SOC 2 Type II
GitHub
Source code
SOC 2 Type II
Partnership & Media Kit
For advertisers, affiliate networks, and business partners evaluating UnicoOS.
UnicoOS Publisher Profile & Affiliate Media Kit
Detailed overview of our platform, audience demographics, affiliate strategy, and partnership categories — including Commercial Lending, B2B Banking, Corporate Credit Cards, and Commercial Insurance. Prepared for CJ Affiliate Network and similar partner programs.
Legal Entity Verification
Don't take our word for it — E1 Unico Corporation's legal identity is registered with independent authorities you can check yourself.
Legal Entity Identifier (LEI)
25490045C323WM1H6539
A globally unique 20-character code under ISO 17442, issued via Bloomberg and overseen by the Global Legal Entity Identifier Foundation (GLEIF) — the same identifier system used in international financial markets.
Verify at GLEIF.orgState Registration
E1 Unico Corporation
For-profit corporation registered with the Corporations Section of the Texas Secretary of State. Jurisdiction: Texas, United States. Principal office: Spring, TX.
Texas SOSDirectBBB® Accredited Business
E1 Unico Corporation has been BBB Accredited since March 23, 2026. BBB Accreditation means we meet the BBB's Standards for Trust — including honesty, transparency, and commitment to make a good faith effort to resolve customer complaints.
SAM.gov Registered Federal Contractor
E1 Unico Corporation is registered in the System for Award Management (SAM.gov), the official U.S. federal government system for entity registration and procurement. Our active registration means we are vetted, verified, and eligible to receive federal contract awards across all categories.
Security Questions?
If you have questions about our security practices, need additional documentation for a compliance review, or want to report a vulnerability — reach out directly.
