Product Data Handling & Security Statement

This statement describes how the UCAN Studio product handles customer data. It is written for IT-security and data-protection reviews. For website privacy, see our Privacy Policy.

On-premises by design

UCAN Studio is installed and operated entirely on your infrastructure — engineer workstations, lab servers, CI runners, or machines in your own cloud account. There is no Alefbits-hosted backend, no SaaS component, and no account with us required to run the product.

No telemetry

The product sends no usage data, no crash reports, and no customer content to Alefbits. Projects, network traces, communication databases, test results and reports are plain files stored where you put them. License validation happens locally against the installed license file or your own license server; it does not phone home.

Personal data

Alefbits processes only the business contact data needed to issue licenses, route support and manage renewals (name, business email, company) — as an independent controller under GDPR. Because the product runs on your premises and we host none of your content, no data processing agreement (Art. 28 GDPR) is required for product use; we act as a processor for nothing.

AI features and model traffic

The optional AI capabilities use a language-model endpoint that you configure and contract: your API key with a cloud provider, or a self-hosted model inside your network (suitable for air-gapped labs). Prompts and tool results flow directly from your environment to your chosen endpoint — never through Alefbits. Where the AI features are not licensed or not configured, no model traffic exists at all.

Support data

Support cases contain only what you choose to attach. Diagnostic logs are produced locally and reviewed by you before sharing.

Questions

Security questionnaires and further documentation are handled through our contact channels; we respond to vendor-assessment requests as part of every procurement process.