Juniper OS runs your business, so it has to be trustworthy by construction. This page is the honest summary of how we protect your data and where our compliance stands. No badges we have not earned.
Security
- Company files are kept apart. Locked company records use row-level security so one company cannot read another company's file.
- Encryption. The database provider encrypts data at rest. Traffic to the app uses HTTPS. Integration credentials are encrypted with a separate key.
- Sign-in. Email and a password. We check a new password against known leaked lists. Multi-factor sign-in is in the product and is not required yet.
- Authority rails. The AI acts only within the tier you choose. Spend limits, deletions, legal papers, regulatory filings, and public posts always need your approval.
- Audit trail. Agent actions and consent decisions are written to logs that are not rewritten.
Data and privacy
- Where data lives. The database is in Ireland, EU (Supabase, eu-west-1). The app is hosted on Vercel, which is not UK-only. Model providers and some email and payment processors sit outside the UK.
- What we send. Talk sends the conversation text and the company context needed to answer. Connected tools send the data you asked us to pull. You choose which tools to connect. We do not claim a separate filter that strips data before a model call.
- UK GDPR. Self-serve data export and deletion (with a recovery window), a consent ledger, and a 72-hour breach-notification commitment.
- See our sub-processors, Data Processing Agreement, retention schedule and privacy notice.
Compliance status
- UK GDPR: export, deletion, consent ledger, and a DPA are available today. We do not claim the whole platform stays in the UK.
- SOC 2: not claimed.
- Cyber Essentials / ISO 27001: under consideration for UK SMB assurance.
Reliability and incidents
Pause stops Approve. It does not stop Talk. Server errors flow to a central monitoring stream. Planned and notable changes are published on our changelog.
Report a security issue
Found something? Use the contact form.