UL Concierge Security Policy

UL Concierge is built for high-net-worth individuals who expect the same level of protection for their lifestyle data as they receive from their private banks. We use bank-grade encryption, tokenized payments, biometric authentication, and strict access controls to ensure your identity, loyalty numbers, and financial information remain private.

All data is encrypted in transit using TLS 1.2+ and stored in a U.S.-based cloud infrastructure with encryption at rest. Payment methods are handled through Stripe's PCI-DSS Level 1 infrastructure, which tokenizes card details so UL Concierge never stores or sees raw card numbers. Zelle and wire instructions are stored in an encrypted vault and masked by default.

UL Concierge staff and concierges cannot view your full payment card numbers, full loyalty numbers, passport details, or stored IDs. Sensitive fields are stored in a vault accessible only to the system and to you. When a concierge needs information to fulfill a request, the system shares only what is required.

Your data is stored on U.S.-based servers with enterprise-grade physical and logical security. We do not sell your data, share it with vendors without your consent, or track you beyond what is necessary to fulfill your requests and improve your service.

For your protection, sessions automatically sign out after 15 minutes of inactivity. We recommend enabling biometric or multi-factor authentication for additional security.

C-Level and Butler members receive enhanced protections, including dedicated secure communication channels, concierge identity verification, and private encrypted vaults for preferences and high-value booking details.

Every request and high-value booking is logged with timestamps, masked transaction identifiers, and confirmation receipts. You can review your request history and verify past transactions through your account dashboard.