• Encrypted everywhere

    Data is encrypted in transit (TLS 1.2+) and at rest, including Slack tokens and OAuth credentials.

  • Isolated per workspace

    Per-tenant data isolation is enforced at the database level. Your workspace never shares data with another.

  • GDPR, under Norwegian law

    Jenz AS is established in Norway. GDPR governs all processing, with SCCs covering any transfer outside the EEA.

  • No training on your data

    Your data is never used to train AI models unless you explicitly opt in. Prompts are processed transiently.

Data protection

  • Encrypted in transit with TLS 1.2 or higher, and encrypted at rest, including Slack tokens and OAuth credentials.
  • Never used to train shared models. Prompts are processed transiently and not retained for training.
  • Deleted on request, with scope and timing set out in the data deletion policy.

Isolation

  • Every task runs in a sandboxed machine started for that workspace alone, on a storage volume only it can mount. No filesystem is shared between stores.
  • Per-tenant data isolation enforced at the database level rather than in application logic.
  • Every connected tool holds its own scoped credential, and each one can be revoked on its own.

Models and data regions

  • Choose your data region: EU or US.
  • Model inference is processed on Azure or Google Vertex, in the region you choose.
  • Choose which model Jenz runs on, and change it later without altering your setup.

Control inside the product

  • Anything that spends money waits for explicit approval by default.
  • Every action the agent takes is recorded in your workspace.
  • You decide which tools are connected, and can disconnect any of them at any time.

Governance

  • Jenz AS is established in Norway. GDPR governs all processing of personal data.
  • Transfers outside the EEA are covered by Standard Contractual Clauses.
  • Sub-processors are named publicly, and our standard Data Processing Agreement is published at meetjenz.com/dpa.

Policies & documents

Questions or reports

Security reviews, vulnerability reports, data rights requests and Data Processing Agreements all go to the same address. We respond within 30 days at the latest, and normally much faster.

contact@jenz.ai