# Unique AI — AI Agents & Assistants

Unique AI by Unique AG holds a panel rating of 3.5/5 from 6 AI judges (category median 3/5), as of 2026-10-28. Provenance: UK / wider Europe; sovereignty: 1 of 4 dimensions proven.

- Vendor: Unique AG (https://www.unique.ai)
- Category: [AI Agents & Assistants](https://whats-best.ai/software/ai-agents.md)
- Provenance (editorial classification): UK / wider Europe
- Canonical page: https://whats-best.ai/software/ai-agents/unique-ai
- Alternatives: https://whats-best.ai/software/ai-agents/unique-ai/alternatives ([markdown](https://whats-best.ai/software/ai-agents/unique-ai/alternatives.md))
- Data as of: 2026-10-29 · evaluated 2026-10-28 · oldest source captured 2026-10-26

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Unique AG
- Headquarters: Not stated on the vendor’s pages as of 26 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 26 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 26 Oct 2026

## The panel's verdict

Unique AI is a Swiss agentic platform for wealth and asset managers. Its strongest area is data use and training, scoring 7-9: no data is used for AI model training, retention is documented store by store with deletion on request, Azure OpenAI processing is in memory only under a Microsoft opt-out with abuse monitoring disabled, and a DPA with SCCs backs ISO 27001, ISO 9001, ISO 42001 and SOC 2 Type 2 certifications. Admin and access scores run 6-8, credited to custom roles with transitive inheritance, implicit audit logging and an MCP hub scoping each agent's reach; we found no public information on single sign-on or SCIM provisioning. Sovereignty scores 5-6, the lowest of any counted criterion: the model layer rides on Microsoft, a US-headquartered provider subject to the US CLOUD Act, subprocessors are published only as categories, and the captured pages give different figures for retention and different statements on data location. Processing and models, integrations and knowledge, and agent capabilities hold at 6-7; scores never spread more than two points on any criterion, and no prices are published.

**Speaks for it:**
- No data is used for AI model training, with the Microsoft path covered by an opt-out agreement, disabled abuse monitoring and in-memory-only Azure OpenAI processing.
- Retention is documented per data store with deletion on request and hard deletion from the database.
- Certified ISO 27001, ISO 9001 and ISO 42001, with SOC 2 Type 2 (February 2025), stated adherence to the FINMA 2018/3 Outsourcing Circular, and a published DPA with SCCs.
- Custom roles with transitive inheritance, per-resource and per-action allow and deny policies, and audit logging written implicitly on every operation.
- Three deployment models including a customer-managed tenant on the customer's own cloud, with self- or cloud-hosted custom models connectable.

**Held against it:**
- Subprocessors are published only as categories, and we found no public information naming individual subprocessors or their locations.
- The model path runs through Microsoft, a US-headquartered provider subject to the US CLOUD Act regardless of server location, with OpenAI access through data centres in Switzerland, Europe, the US, UK and Asia.
- We found no public information on single sign-on or SCIM user provisioning.
- We found no public information on connectors for mail, CRM, ticketing or ERP systems, on webhooks, or on how grounded answers cite their sources.
- We found no public information on human approval before consequential agent actions, or on triggers and schedules for agent runs.

**Best for:**
- You are a wealth or asset manager who needs written no-training commitments and store-by-store retention documentation for compliance review.
- Your team must run the platform in its own cloud and connect self- or cloud-hosted models.
- You need role-level control over which systems, tools and datasets each agent may touch.
- Your knowledge lives in SharePoint or Confluence and you want incremental, configurable synchronization.

**Avoid if:**
- You need no US-headquartered provider in the processing chain, since the default model path runs through Microsoft.
- Your compliance regime requires pinning inference to Europe, as the documented OpenAI path spans Microsoft data centres in Switzerland, Europe, the US, UK and Asia.
- You operate outside the EEA and Switzerland and want a European controller, since the documented controller there is Unique Applications Inc. of New York.
- You must review a named subprocessor list with locations before signing, as the published information names only categories.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Head of IT | The Data Protection Officer | The Automation Lead | The Customer-Service Director | The Works Council Member | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Data use, training & retention | 4/5 | 4.5/5 | 4.5/5 | 4.5/5 | 3.5/5 | 4/5 |
| Models & processing location | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 |
| Admin, identity & access controls | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 | 3/5 | 3.5/5 |
| Integrations, connectors & knowledge | 3/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3/5 |
| Agent capabilities & guardrails | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 |
| European sovereignty | 3/5 | 3/5 | 3/5 | 3/5 | 2.5/5 | 3/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **3.5/5** | **3.5/5** | **3.5/5** | **3.5/5** | **3/5** | **3.5/5** |

### The judges

- **The Head of IT** (v1.0): Has to roll an AI assistant out to eight hundred staff without a second shadow-IT wave. Wants SSO and SCIM, groups that decide who gets which model, agent and connector, answers that respect SharePoint permissions, audit logs for the SIEM, and a deployment option that is not "trust us".
- **The Data Protection Officer** (v1.0): Signs the DPA and gets asked where a prompt goes. Wants every model provider named as a subprocessor with its region, training excluded for all of them, retention the company controls, and an EU-only switch that also covers agents and connectors — not just the chat window.
- **The Automation Lead** (v1.0): Builds the agents that file tickets, draft offers and chase approvals across the ERP, CRM and wiki. Wants tools and actions with scoped permissions, MCP and an API, approval steps before anything is sent, run logs, and a way to test an agent before the whole company uses it.
- **The Customer-Service Director** (v1.0): Runs a contact centre with forty agents and wants half the routine calls and chats answered by an AI agent. Wants handover to a human with the full context, actions in the order and ticket systems, evaluation before go-live, and a price per conversation the CFO can forecast.
- **The Works Council Member** (v1.0): Has a co-determination right the moment a tool can monitor staff, and an AI assistant logs every prompt. Wants usage reports that can be aggregated or pseudonymised, prompt logging rules set out in writing, a human approving what agents do to colleagues, and no training on staff input.
- **The Skeptic** (v1.0): Has read "European AI" on a wrapper that sends every prompt to a US model, "agents" that are saved prompts, and "we never train on your data" with no word on the model provider behind it. Asks which model answers, where it runs, what it may do unsupervised, and what a thousand seats cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: 1 of 4 dimensions proven.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | US CLOUD Act reach | 0/2 | [S3] |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Backup: yes [S7]
- Backup encryption: yes [S6]
- Breach notification: 24 [S7]
- CCPA: yes · CCPA [S3]
- Certifications: ISO 27001 · ISO 9001 · ISO 42001 · SOC 2 Type 2 · FINMA 2018/3 Outsourcing Circular [S7]
- Data access policy: yes · yes [S3]
- Data security: reasonable physical and technical safeguards per industry standards [S4]
- Data separation: yes · yes [S7]
- Dmca agent: privacy@unique.ch [S4]
- DPA scc: https://www.unique.ai/data-processing-addendum · yes [S4]
- Encryption: yes · yes · yes [S1]
- Encryption: data and connections · yes [S3]
- Encryption at rest multi tenant: Multi tenant: Microsoft/platform-managed keys, not HSM-backed [S6]
- Encryption at rest single tenant: Single tenant: HSM-backed (FIPS 140-2 Level 2) 4096-bit RSA keys in own Key Vault; disks encrypted with FIPS 140-2 compliant AES256 [S6]
- Export restrictions: Cuba · Iran · North Korea · Sudan · Syria · Crimea [S4]
- GDPR: GDPR · yes [S3]
- GDPR authority: competent EEA/EU authority per art. 77 GDPR [S7]
- Infrastructure controls: Encryption key access restricted · Account authentication enforced · Production application and database access restricted · Network and Firewall access restricted [S3]
- ISO certifications: yes · ISO 27001 · ISO 9001 · ISO 42001 [S3]
- Microsoft logging optout: Opt-out agreement with Microsoft, abuse monitoring disabled [S6]
- No sale: no · no [S5]
- Organizational controls: Anti-malware technology employed · Portable Devices encrypted · Code of Conduct acknowledged by employees and enforced · NDA acknowledged by employees and contractors [S3]
- Penetration testing: yes [S7]
- Privacy policy: https://www.unique.ai/privacy [S4]
- Remote support: yes [S7]
- Roles: Data Processor · Data Controller [S7]
- Singapore authority: PDPC [S7]
- SOC 2 type2: SOC 2 Type 2 · yes · 2025-02 [S3]
- Swiss authority: FDPIC [S7]
- Trust center: yes [S1]
- Two factor: yes [S7]
- UK GDPR authority: Information Commissioner's Office (ICO) [S7]
- Whitepaper: yes · yes [S3]

**Data**
- Audit log retention: 10 [S7]
- Azure openai storage: Documents · Azure OpenAI Cognitive Services · none · in memory only · yes [S6]
- Backup retention after deletion: 14 [S6]
- Backup rpo: 24 [S6]
- Client ip limitation: yes [S11]
- Deleted files recovery window: 30 [S6]
- Deletion after termination: yes [S4]
- Export on termination: 30 · yes [S4]
- Hard deletion: Data hard-deleted from database, not soft-marked; files erased or anonymized [S6]
- Last updated: 2026-05-05 [S6]
- Location: data maintained in Switzerland and other locations as reasonably necessary [S5]
- Logging retention: 365 [S6]
- Manual deletion process: Manual deletion via email to Security & Compliance Team, confirmed by email [S6]
- Multi tenant export terms: 3 · 5 [S11]
- Multi tenant retention: 90 · basic [S11]
- No model training: no [S6]
- Not shared with openai: Azure OpenAI models deployed separately within Azure customer environment [S6]
- Ownership: yes [S7]
- Post contract deletion: 5 · no [S11]
- Postgres policy: Prompts & answers, document texts · Flexible Postgres Server · yes · yes · yes [S6]
- Retention controls: Data retention procedures established · Customer data deleted upon leaving · Data classification policy established · GDPR Compliance · yes · yes [S3]
- Retention default: 10 years after end of last transaction [S5]
- Retention policy: Retained as long as reasonably necessary per Data Retention Policy [S7]
- Return and deletion: yes · yes · yes [S7]
- Single tenant export delivery: Azure Storage Account SAS token · no · 5 [S11]
- Single tenant retention: 1825 · basic · 5 [S11]
- Standard retention after termination: 30 · yes [S6]
- Statistical collection: Aggregated statistical / anonymized data collected per DPA and privacy policy [S6]
- Storage accounts policy: Documents · Storage Accounts · yes · yes · yes [S6]
- Tls encryption: TLS 1.2+ [S6]
- Trial data loss: yes [S4]
- Vector db policy: Embedding vectors · Vector DB (Qdrant) · yes · yes · yes [S6]

**Hosting**
- Azure switzerland: Applies to Unique hosted deployments only; data stored in Switzerland of the Microsoft Azure Cloud or client-chosen location [S6]
- Deployment options: Multi-tenant on Unique cloud · Single tenant on Unique cloud · Customer-managed tenant on customer cloud [S7]
- Private cloud: yes · no untrusted external connections [S3]
- Provider: Switzerland · Microsoft Azure [S3]
- Storage location: Storage remains in Switzerland [S7]

**Integrations**
- API only configuration: no [S9]
- API sdk: APIs for search, Q&A, workflow automation; SDK for custom logic [S2]
- Azure openai library: @azure/openai · API must be compatible with GPT/Azure model inference standards [S9]
- Bulk policy mutation: adminAddPolicies adds several permissions in a single call [S10]
- Chat API URL regions: https://api.us1.unique.app/chat/graphql · https://gateway.unique.app/chat-gen2/graphql [S9]
- Gatekeeper API endpoint: POST {GATEKEEPER_API_URL}/graphql [S10]
- Governed layer: governed integration layer for internal systems and market data [S1]
- Graph permissions content sync: Sites.Selected · Lists.SelectedOperations.Selected [S13]
- Graph permissions permission sync: Sites.Selected · GroupMember.Read.All · User.ReadBasic.All [S13]
- Oauth2 support: oauth2ClientId · oauth2ClientSecret · oauth2Endpoint · oauth2Scope (optional) · yes [S9]
- Policy fields: read · write · delete · manage · create · list · ALLOW · DENY [S10]
- Policy mutations: adminAddPolicy grants a resource/action permission to a custom role [S10]
- Remove policy mutation: adminRemovePolicy revokes a permission [S10]
- Required role: chat.admin.all [S9]

**Legal**
- Auto renewal: yes · 30 [S4]
- Claims period: 1 year [S4]
- Competitor ban: yes · yes [S4]
- Confidentiality: Mutual confidentiality obligations; Unique may use Content for further development of the Service [S4]
- Controller EU ch: EEA and Switzerland · Unique AI AG · Stockerstrasse 34, 8002 Zurich, Switzerland [S5]
- Controller other: rest of world · Unique Applications Inc. · c/o Industrious \| 776A 6th Avenue \| 10001 New York \| USA [S5]
- Document precedence: Order Form · Terms of Service · SCC · DPA [S4]
- Docusign valid: yes [S4]
- DPA acceptance: clicking I agree · accessing website · utilizing the Service · signing the DPA [S7]
- DPA last updated: 2025-07 [S7]
- Entity: Unique AI AG [S1]
- Entity: Unique AI AG [S2]
- Entity: Unique AI AG [S8]
- Entity: Unique AI AG [S3]
- Entity: Unique AG [S4]
- Entity: Unique AG · Stockerstr. 34, 8002 Zürich [S7]
- Feedback assignment: Customer feedback is assigned to Unique [S4]
- Governing law: Swiss substantive law; exclusive jurisdiction courts in Zurich 1, Switzerland [S4]
- Governing law: Swiss substantive law · courts in Zurich 1, Switzerland [S7]
- Ip rights: Unique retains all Service rights; customer owns Content [S4]
- Last updated: October 18, 2023 [S4]
- Policies: yes · yes · yes [S1]
- Processor role: data processor for business customers; customer is data controller [S5]
- Termination cure period: 30 [S4]

**Pricing**
- Invoice terms: 30 [S4]
- Liability cap: fees paid in preceding 12 months [S4]
- Non refundable: yes · yes · yes [S4]
- Payment methods: charges made in advance, annually or per billing frequency in Order Form · credit card [S4]
- Price change notice: next renewal term · 30 [S4]
- Taxes: yes · customer [S4]

**Product**
- Adoption rate: 87 [S2]
- Agentic table: yes [S2]
- Agents investment: 3 [S1]
- Agents operate: 3 [S1]
- Agents wealth: 3 · 3 [S1]
- AI governance: yes · yes · yes · yes [S3]
- AI teammate: Remy [S3]
- API policies not visible in UI: no · adminPaginatedPolicies [S10]
- API token encryption: AES-256-cbc · Azure KeyVault per deployment · yes [S9]
- Attachment ingestion: yes [S12]
- Attachment size limit: 200 [S12]
- Audit log destinations: AUDIT_LOG_DIR mounted volume · yes · AUDIT_LOG_DIR=/dev/stdout [S11]
- Audit log entry fields: app · clientIpAddress · companyId · userId · serviceId · type [S11]
- Audit log event list non deterministic: no [S11]
- Audit log modes: basic · verbose_including_cid · basic · AUDIT_LOG_MODE [S11]
- Audit log verbose mode liability: verbose_including_cid · no [S11]
- Audit logs default implicit: yes [S11]
- Audit logs purpose: Unique provides logs of user and system events for debugging and internal/external compliance [S11]
- Audit logs scope: no · yes [S11]
- Audit logs self hosted config only: self-hosted (Customer Managed or On Premise) only [S11]
- Aum served: $5T+ in AUM [S1]
- Auth methods: certificate (recommended for production) · client secret (development/testing only) [S13]
- Authentication: Azure AD application permissions, no user accounts needed [S13]
- Availability SLA: commercially reasonable efforts only, no uptime guarantee [S4]
- Benchmark dataset: proprietary financial services data from a due diligence exercise by a global investment management firm [S14]
- Benchmark document count: 8 [S14]
- Benchmark document types: Fund Due Diligence Questionnaire · Fund Snapshot Summary · Comprehensive Investor Questionnaire · Valuation Policy Document · Private Equity Strategy Overview · AI and Technology Integration Brief · Organizational Overview · Performance an… [S14]
- Benchmark methodology: All configurations tested with the same prompt set on a consistent dataset for fair, repeatable comparisons [S14]
- Benchmarking: Agents are automatically and manually benchmarked against human-verified ground truths in a RAG setting [S14]
- Benchmarking framework: Customers can use a benchmarking framework to test models against their own use cases. [S8]
- Change detection: yes [S12]
- Change detection: File-diff mechanism; only new/modified files re-ingested; deleted files removed from knowledge base [S13]

**Subprocessors**
- Categories: IT services · telecommunications · consulting · sales/marketing [S5]

**Support**
- Docs: yes [S2]
- Electronic signatures: Notices by e-mail; DocuSign e-signatures valid [S4]
- SLA exclusion group delete: Deleting a LanguageModelGroup in use disrupts the linked assistant and is not covered by SLA [S9]

100 more facts on the canonical page: https://whats-best.ai/software/ai-agents/unique-ai

## Questions

### Is Unique AI European?

Yes, though not from the EU. whats-best.ai classifies Unique AI as UK / wider Europe.

### Where does Unique AI store data?

Not stated on the vendor’s pages as of 26 Oct 2026.

### Does Unique AI have a free plan?

Not stated on the vendor’s pages as of 26 Oct 2026.

### What are the best alternatives to Unique AI?

As of 28 Oct 2026, the panel rates [Langdock (4/5)](https://whats-best.ai/software/ai-agents/langdock), [Dust (3.5/5)](https://whats-best.ai/software/ai-agents/dust) and [Omnifact (3.5/5)](https://whats-best.ai/software/ai-agents/omnifact) highest among the other 15 AI Agents & Assistants products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Langdock](https://whats-best.ai/software/ai-agents/langdock) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Unique AI alternatives](https://whats-best.ai/software/ai-agents/unique-ai/alternatives).

## What this page leaves out

- 9 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 9 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.

## Sources

- [S1] Vendor homepage: https://www.unique.ai/ (checked 2026-10-26)
- [S2] Features page (platform): https://www.unique.ai/en/platform (checked 2026-10-26)
- [S3] Trust center: https://www.unique.ai/trust-center (checked 2026-10-26)
- [S4] Terms of service: https://www.unique.ai/terms-of-service (checked 2026-10-26)
- [S5] Privacy policy: https://www.unique.ai/privacy-policy (checked 2026-10-26)
- [S6] Data use, training & retention — found from sitemap: https://docs.unique.ai/security-and-compliance/data-protection/data-retention-and-data-deletion-at-unique (checked 2026-10-26)
- [S7] Data use, training & retention — found from sitemap: https://www.unique.ai/data-processing-addendum (checked 2026-10-26)
- [S8] Models & processing location — found from sitemap: https://docs.unique.ai/administrators/models-llm-management (checked 2026-10-26)
- [S9] Models & processing location — found from sitemap: https://docs.unique.ai/it-operators/custom-models-and-embeddings/connect-custom-lxm-llm-with-unique-ai (checked 2026-10-26)
- [S10] Admin, identity & access controls — found from sitemap: https://docs.unique.ai/administrators/access-management-for-admins/how-to-create-a-custom-role (checked 2026-10-26)
- [S11] Admin, identity & access controls — found from sitemap: https://docs.unique.ai/it-operators/operations/security-and-data-privacy/audit-logs (checked 2026-10-26)
- [S12] Integrations, connectors & knowledge — found from sitemap: https://docs.unique.ai/it-operators/integrations-connectors/confluence-connector (checked 2026-10-26)
- [S13] Integrations, connectors & knowledge — found from sitemap: https://docs.unique.ai/it-operators/integrations-connectors/sharepoint-connector (checked 2026-10-26)
- [S14] Agent capabilities & guardrails — found from sitemap: https://docs.unique.ai/administrators/research/agent-benchmarking-evaluations (checked 2026-10-26)
- [S15] Agent capabilities & guardrails — found from sitemap: https://docs.unique.ai/administrators/space-management/create-spaces/unique-ai-space/execution-time-tracking-for-unique-ai-agent-steps (checked 2026-10-26)

---

Cite as: whats-best.ai, "Unique AI — AI Agents & Assistants", AI panel analysis, as of 2026-10-29. https://whats-best.ai/software/ai-agents/unique-ai

Corrections: https://whats-best.ai/correct/1034?target=page