Skip to main content

jrni's Trust Center

Security at JRNI

This Trust Center provides you with resources demonstrating jrni’s continuous commitment to protecting customer data. Below you’ll find information about jrni’s trust practices including additional information related to security, privacy, AI, and general infrastructure documentation. We prioritize security in our product strategy and build our platform using best practices for highly available, scalable, and secure cloud applications. We regularly monitor and assess our program to ensure it meets or exceeds compliance and regulatory requirements.

infosec@jrni.com Privacy policy Report a concern

Compliance

ISO 27001:2022
SOC 2 Type 2
GDPR
PCI-DSS
EU-U.S. Data Privacy Framework
Swiss-U.S. Data Privacy Framework
UK Extension to EU-U.S. DPF

Controls

Access Control

  • Role-based access control (RBAC) with principle of least privilege
  • Privileged Access Management (PAM) for administrative accounts
  • Just-in-Time (JIT) access provisioning for elevated permissions

Data Protection

  • AES-256 encryption for data at rest
  • TLS 1.2+ encryption for data in transit
  • AWS Key Management Service for encryption key management

Network Security

  • Web Application Firewall (WAF) protection
  • DDoS mitigation through AWS Shield
  • Network segmentation and VPC isolation

Application Security

  • Secure software development lifecycle (SSDLC)
  • Static and dynamic application security testing
  • Third-party code dependency scanning

Operational Security

  • 24/7 security monitoring and alerting
  • Centralized log management and SIEM
  • Documented incident response procedures

Business Continuity

  • Multi-availability zone deployment for high availability
  • Automated failover and disaster recovery
  • Regular backup testing and validation

Vendor Management

  • Security due diligence for all sub-processors
  • Contractual security requirements in vendor agreements
  • Annual vendor security reviews

Compliance

  • Annual ISO 27001 certification audit
  • Annual SOC 2 Type II examination
  • GDPR compliance with appointed DPO

Resources

Resources

  • SOC 2 Type II Report
  • SOC 3 Report
  • ISO 27001 Certificate
  • Penetration Test Executive Summary
  • jrni API fair usage

Subprocessors

Amazon Web Services (AWS) Primary cloud infrastructure and hosting provider for JRNI services. AWS also provides managed AI services via Amazon Bedrock for selected features and internal operations; data submitted to Bedrock is processed under our AWS agreement and is not used to train general-purpose models.
Worldwide
Nine.ch Primary cloud infrastructure and hosting provider for Calenso Services
Switzerland
Google Cloud Platform Supplementary cloud services and APIs (e.g., Maps) and analytics tooling for our sites, and managed AI services (Vertex AI / Gemini) used for selected JRNI features and internal operations under Google Cloud enterprise terms
Worldwide
New Relic Application performance monitoring and observability
Worldwide