
Security and data protection.
What happens to your data, where it runs, and which controls stay with you. Written for the person who has to sign off on it.
Encrypted everywhere
Data is encrypted in transit (TLS 1.2+) and at rest, including Slack tokens and OAuth credentials.
Isolated per workspace
Per-tenant data isolation is enforced at the database level. Your workspace never shares data with another.
GDPR, under Norwegian law
Jenz AS is established in Norway. GDPR governs all processing, with SCCs covering any transfer outside the EEA.
No training on your data
Your data is never used to train AI models unless you explicitly opt in. Prompts are processed transiently.
Data protection
- Encrypted in transit with TLS 1.2 or higher, and encrypted at rest, including Slack tokens and OAuth credentials.
- Never used to train shared models. Prompts are processed transiently and not retained for training.
- Deleted on request, with scope and timing set out in the data deletion policy.
Isolation
- Every task runs in a sandboxed machine started for that workspace alone, on a storage volume only it can mount. No filesystem is shared between stores.
- Per-tenant data isolation enforced at the database level rather than in application logic.
- Every connected tool holds its own scoped credential, and each one can be revoked on its own.
Models and data regions
- Choose your data region: EU or US.
- Model inference is processed on Azure or Google Vertex, in the region you choose.
- Choose which model Jenz runs on, and change it later without altering your setup.
Control inside the product
- Anything that spends money waits for explicit approval by default.
- Every action the agent takes is recorded in your workspace.
- You decide which tools are connected, and can disconnect any of them at any time.
Governance
- Jenz AS is established in Norway. GDPR governs all processing of personal data.
- Transfers outside the EEA are covered by Standard Contractual Clauses.
- Sub-processors are named publicly, and our standard Data Processing Agreement is published at meetjenz.com/dpa.
Policies & documents
Privacy Policy
What we collect, why, how long we keep it, and the rights you have over your personal data.
ReadTerms of Service
The agreement that governs your use of Jenz: subscriptions, acceptable use, liability, and more.
ReadData Deletion
How to delete your data from Jenz, what gets removed, and how fast, whether you have an account or not.
ReadData Processing Agreement
Our standard GDPR Article 28 agreement, with sub-processors and security measures.
ReadSub-processors
The named list of vendors that help us run Jenz, what each one does, and where they are located.
ReadQuestions or reports
Security reviews, vulnerability reports, data rights requests and Data Processing Agreements all go to the same address. We respond within 30 days at the latest, and normally much faster.
contact@jenz.aiJenz AS
Bjerregaards gate 60A
0174 Oslo
Norway
Org.nr. 938 033 110