Unique AI

The Skeptic

Training and retention are documented store by store: prompts and answers in Postgres with deletion on request, documents in storage accounts, embedding vectors in Qdrant, and a flat statement that none of it is used for AI model training. The model provider side is pinned down too — Azure OpenAI processes documents in memory only, with an opt-out agreement with Microsoft and abuse monitoring disabled — and a DPA with SCCs is published, backed by ISO 27001, ISO 42001 and SOC 2 Type 2 audits. What keeps it off the top rung: deletion runs through an email to the security team rather than admin-configurable retention with a customer-facing audit trail, and the privacy policy, the retention documentation and the DPA give different figures for retention, which a buyer must reconcile. 3 5 6 7

Report an error

The Skeptic

The default brain is named: OpenAI reached through Microsoft infrastructure, storage contractually kept in Switzerland, and Azure OpenAI models deployed separately within the customer's Azure environment rather than through public OpenAI services. Three deployment models are documented, including a customer-managed tenant on the customer's own cloud, and self- or cloud-hosted custom models can be connected for standard use cases, with model availability configurable per deployment. We found no public information on a per-model list with inference regions, on an admin-selectable EU-only setting enforced across all models, or on excluding a specific provider. 3 6 7 9

Report an error

The Skeptic

Access control is genuinely engineered: custom roles with transitive inheritance, resource-by-action permissions (read, write, delete and so on) settable through the Gatekeeper API, implicit audit logging on every operation, SharePoint permissions synced into the knowledge base, and per-user token and spend tracking with daily limits. The unusually honest documentation of limits — audit event lists non-deterministic, exports prepared over days and capped at five business days per request, granular policies invisible in the UI — is to the vendor's credit. We found no public information on single sign-on or SCIM provisioning, which for a bank buying a thousand seats is the first question IT asks. 2 8 10 11 13

Report an error

The Skeptic

The SharePoint and Confluence connectors are documented in real depth — incremental file-diff sync, permission synchronization for SharePoint with granular Microsoft Graph scopes, label-driven ingestion, rate limits and configurable scans every 15 minutes by default — and custom MCP servers plus a GraphQL API and SDK open the platform to internal systems. The documented library reaches file stores and wikis; we found no public information on mail, CRM or ticketing connectors, on webhooks, or on how a grounded answer cites its sources — the question I always ask before trusting a RAG answer. 2 9 12 13

Report an error

The Skeptic

These are real agents, not saved prompts: an agentic loop with planning, tool execution and post-processing, prebuilt finance agents for KYC, RFP and due diligence workflows, and benchmarking against human-verified ground truths with quality-risk flagging and a four-stage model evaluation funnel, plus per-step execution-time logging. The MCP Hub lets an admin scope which systems, tools and datasets each agent may touch. We found no public information on human approval before consequential actions, on agent triggers or schedules, or on versioning and staged rollout — so I cannot say what stops an agent from acting unsupervised. 1 2 8 14 15

Report an error

The Skeptic

The contracting entity for EEA and Swiss customers is Unique AI AG at Stockerstrasse 34, Zurich, under Swiss law with exclusive venue in Zurich, storage remains in Switzerland on named Azure infrastructure, and a DPA with SCCs is published. The model layer rides on Microsoft, a US-headquartered provider subject to the US CLOUD Act regardless of server location, mitigated by an opt-out agreement, disabled abuse monitoring and data centres in Switzerland — and a New York entity, Unique Applications Inc., is controller for customers outside the EEA and Switzerland. Subprocessors are published only as categories; we found no public information naming individual subprocessors with their locations, including the DPA appendix. 3 4 5 6 7

Report an error

The Skeptic

We found no public prices: subscription fees are set in the Order Form, and none of the captured pages — homepage, platform, trust center, terms of service, documentation — shows a per-seat, per-agent or usage price, a tier breakdown or usage limits. The published material covers billing mechanics only: invoiced fees due 30 days from the invoice date, subscription obligations non-cancelable and payments non-refundable, automatic renewal unless notice is given at least 30 days before term end, fees changeable at renewal on 30 days' written notice, taxes extra. The annual cost for a given number of seats cannot be computed from public pages. 1 2 3 4

Report an error