trust · ownership · operations

Your code is yours. Always.

uStack applications are designed to be operated, owned, and extended — not rented. No lock-in, no proprietary runtime, no rebuilds when you outgrow us. The day you pay $99, the IP, the code, the schema, and the database are yours.

// 01 · ownership

Your code is yours.

GitHub repo transferred to your account. Signed Postgres dump on demand. Full IP — code, schema, prompts, generated artifacts. Deploy in your VPC, on a laptop, or anywhere Node runs. No exit fees, ever.

// No lock-in
// 02 · stack

Built on an industry-standard stack.

Next.js · Postgres · Prisma · GitHub · Vercel. Anyone you hire already knows it. Your engineering team continues from day one — no proprietary runtime to learn, no AI-generation artifacts to reverse-engineer. ustack Autobuild™ ships clean, idiomatic code that reads like it was written by a senior engineer.

// No proprietary runtime
// 03 · operations

Designed for real operations.

Per-app dedicated Postgres — never co-mingled. Daily backups with 30-day retention. HTTPS everywhere, secrets encrypted at rest. Audit trail on every state change. Designed to be the system businesses run on, not a prototype.

// No co-mingled data
data · retention · backup

What we hold, what you control.

Spec is yours.

Your spec.json — entities, screens, requirements — is yours from the moment it's synthesized. Read it before we build. Download it later. Reuse it for the next iteration.

Built app is yours.

On the day you pay $99, the GitHub repo is transferred to your account. The Postgres schema, migrations, and a signed dump of your data are downloadable from your portal.

Per-app databases.

Every customer app runs on a dedicated Postgres database. We never co-mingle customer data. You can query, dump, or migrate your data independently of any other tenant.

Backups + retention.

Hosted apps run on Neon Postgres with managed daily backups + 30-day point-in-time recovery. After your trial, your data is held for 30 more days — reach out and we can spin a hosted copy back up during that window. After 60 total days, the database is permanently deleted.

security posture

Production defaults, not afterthoughts.

// transport

HTTPS everywhere

All connections encrypted. HSTS enforced. No mixed content.

// secrets

Encrypted at rest

Environment secrets encrypted in Vercel. DB credentials rotated per environment. No secrets in git.

// payments

We never see your cards

Stripe handles payment cards exclusively. We never see, store, or transmit card data.

// access

Role-based, server-enforced

Permission checks on every server action. Row-level filtering by organization. UI roles never trusted alone.

// audit

Audit log on every change

Every state change writes an audit row. Queryable by actor, entity, time. Available for export in regulated workloads.

// regulated

SOC 2 / HIPAA via custom build

For SOC 2, HIPAA, or other regulated requirements, scope a custom build so we can implement the controls explicitly.

operational support · running on it

What happens when something breaks?

Ownership and security cover the legal questions. Here's what covers the operational ones — uptime, response time, backups, change cadence, and incident communication.

// monitoring
Hosted apps watched continuously

Every hosted app runs with built-in monitoring. Errors, slow responses, and deploy failures alert us automatically — usually before you notice.

// response
We aim to reply during business hours

Email replies Mon–Fri, 9–6 ET, typically within an hour. We aim to acknowledge hosted-app outages and workflow-breaking bugs the same day; we don't promise a contractual SLA on response time yet.

// backups
Neon-managed daily backups + 30-day PITR

Hosted apps run on Neon Postgres with managed daily backups and 30-day point-in-time recovery built in. Need a restore? Reach out — we'll quote it case-by-case based on scope. Self-hosted customers take their own backups via the database export.

// changes
Changes ship the same pipeline

Change requests run the same build → quality check → deploy pipeline as the original app. Subscribers on +Changes get 15 included per month. Source-download customers run change orders for $99 each.

// incidents
What you hear when something goes wrong

If a hosted app goes down or a change causes a regression, we aim to email same-day with what happened, what we did, and how to verify. No silence, no spin.

// scope
What's covered vs quoted

Hosting, backups, monitoring, and included changes are part of your subscription. New features, new actors, integrations, or scope expansions are quoted as change orders or custom builds.

Build fails? You're not charged.

If ustack Autobuild™ cannot produce a working app, you owe nothing. No invoice, no awkward email — the free-trial promise is real.

No exit fees, no lock-in.

Move between exits whenever. Host with us today, take the code next year, scope a custom build the year after — your repo and data are always yours.

Refund policy.

If you paid to keep an app and we deleted it in error, we refund. We do not refund for change-of-mind, kept apps, or completed edits.

Trial expiry.

Built apps come with a 30-day free trial. After expiry the URL goes offline; data is retained for 30 more days. We send reminders at day 23, 27, 29, and the morning of day 30 so this never surprises you.

questions before you sign in

Real human support, real human reply.

Email hello@ustack.ai. We reply in business hours, usually within an hour.

Sign in to start →See the architecture →