Uipath
uipath.com
Detected Vendor Stack
Our Apps for Your Stack
Personal tab, channel tab, bot, and message extension for scanning AI/security language in Teams.
Ticket sidebar app for scanning support replies, security responses, macros, and AI claims.
CRM card and workflow webhook for scanning sales/security claims and customer-facing AI language.
Outlook add-in for scanning email drafts, AI-generated replies, vendor communications, and pasted policy text.
SharePoint Framework (SPFx) web part for scanning document libraries, wiki pages, and SharePoint list content for governance and AI trust risks.
Microsoft Word add-in for scanning document content, track-changes text, vendor agreements, and AI-generated policy drafts.
Jira-targeted program blueprint exporter with native issue types, epics, components, and story templates.
Enterprise Onboarding
SSO / Identity Provider
OIDC sign-in via Auth0 (now Okta Customer Identity Cloud). Supports universal login, Auth0 MFA, and custom rules/actions pipelines.
Configured as a Machine-to-Machine or Regular Web App in your Auth0 tenant. Issuer: `https://your-tenant.auth0.com`.
Authentication features(7 available · 2 provisioning)TOTP / Authenticator AppPasskeys (WebAuthn)Magic Link / PasswordlessEncrypted Backup Codes+3 more
Users are automatically created in the platform on first SSO login — no manual invitation required. Org membership and role are assigned from IdP attributes.
Automated user lifecycle management — create, update, and deprovision accounts directly from your IdP. Supports Okta, Entra ID, and OneLogin SCIM connectors.
GitHub Signals
CI security tooling
Codebase
AI repos
AI Attack Surface
agents.uipath.com → 104.18.174.91 (+1)
api.uipath.com → 104.18.175.91 (+1)
assistant.uipath.com → 104.18.174.91 (+1)
labs.uipath.com → 20.105.232.21
platform.uipath.com → 104.18.174.91 (+1)
playground.uipath.com → 104.18.174.91 (+1)
studio.uipath.com → 104.18.174.91 (+1)
Website Tech Stack
Job Posting Intelligence
Trust Scanner
0
Public Surface
0
AI Language
0
Legal Clarity
0
Security Trust
33
Consistency
100
Remediation Opportunity
Trust Scanner · ATG Scorecard
Uipath · public trust surface
Public trust surface scored 5 with 18 positive detectors out of 99 across 14 pages. Higher remediation scores mean more visible work remains.
5
weak
Public Surface
Whether trust, legal, security, AI, methodology, and contact surfaces are discoverable and coherent.
0% signal
AI Language
Whether AI claims are specific, bounded, and tied to engineering evidence rather than generic positioning.
0% signal
Legal Clarity
Whether privacy, terms, contract, data-processing, and customer-facing boundaries are clear enough to review.
0% signal
Security Trust
Whether public trust artifacts explain controls, evidence, limitations, and escalation paths without oversharing.
0% signal
Consistency
Whether public claims, caveats, service language, and trust artifacts agree across the site.
33% signal
Remediation Opportunity
Whether the public surface makes the next improvement work obvious, scoped, and evidence-backed.
100% signal
Public-signal caveat
Based on public website signals and observed artifacts, not proof of any organization's internal security maturity.
Observed artifacts · 11 of 11
Top finding
highMissing Security Practices
Summarize security controls in a public-safe, customer-facing page.
24 more findings
Missing Secure SDLC
Describe the lifecycle controls that support secure development.
Missing Vulnerability Disclosure
Publish the disclosure path and safe-harbor terms together.
Missing Security Contact
Expose a clear public security contact or disclosure mailbox.
Missing Incident Response
State how incidents are detected, escalated, and communicated.
Missing Security Whitepaper
Provide a public security whitepaper when the product depends on trust-sensitive claims.
Missing Certifications
Only publish certification claims alongside a public attestation artifact.
Missing Security Overview
Add a concise overview of the security program and where the supporting evidence lives.
Missing Incident Communication
Document how customers are notified and where public incident updates live.
Missing Status Page
Link the status page from the trust surface if it is part of the buyer review path.
Missing Privacy Policy
Clarify what personal data you collect, process, retain, and disclose.
Missing Data Breach Notice
Explain how breach notification works and who is notified.
Missing Data Processing Addendum
Make the DPA request path easy to find for customers and partners.
Missing Subprocessors List
Publish a current subprocessor or vendor list with update cadence.
Missing AI Usage Policy
Explain how AI is used, reviewed, and bounded in public-facing products.
Missing Responsible AI Principles
Publish a short principle set that maps to actual product controls.
Missing Customer Data Training Policy
Clarify whether customer prompts, files, and outputs can train or improve models.
Missing Model Provider Disclosure
State which model or provider services are used and where customer data may flow.
Missing Prompt Logging Policy
Clarify whether prompts, conversations, and outputs are logged or retained.
Missing Model Card or System Card
Publish a model or system card if the site makes substantial AI claims.
Missing AI Evaluation or Safety Report
Provide a public evaluation or safety summary when AI claims are central.
Missing Transparency Report
Publish a public transparency report when the product makes AI capability claims.
Missing Model Limitations
Describe where the model or AI system fails, degrades, or needs human review.
Trust center missing privacy policy
Link the privacy policy directly from the trust center and footer.
Trust center missing security practices
Add a security practices page or link the existing security overview from the trust center.
Dimension maturity
Scanned 2026-07-04 · rules vtrust-scanner-rules.v1 · 17 artifacts probed