Security at Jannat AI

Your documents carry your business. We protect them like it.

Invoices, BOLs, and rate confirmations are commercially sensitive. Every layer of Jannat AI, from upload to export, is built to keep your data encrypted, isolated, and under your control.

TLS 1.2+

Encryption in transit

AES-256

Encryption at rest

Per-tenant

Data isolation

Audit log

Document activity

Defense in depth

Security built into every layer

From the moment a document hits our servers to the moment it lands in your ERP, protection is the default, not an add-on.

Encryption everywhere

All traffic is encrypted with TLS 1.2+ in transit. Documents and extracted data are encrypted at rest with AES-256 on managed cloud storage.

Strict tenant isolation

Every workspace's documents, extracted fields, and exports are scoped to that workspace. No customer can ever see another customer's data.

Role-based access

Owners, admins, and members get only the permissions they need. Two-factor authentication is available for every account at no extra cost.

Audit trail

Sensitive document actions such as views, deletions, exports, and retention cleanup are recorded in a workspace audit log so admins can see who did what, and when.

Hardened infrastructure

We run on managed, continuously patched cloud infrastructure with automated backups, network-level firewalls, and monitored uptime.

You own your data

Export your documents and extracted data at any time. When you delete data or your account, it is permanently removed from our systems.

Data handling

Clear rules for how your documents are processed

Your documents are processed for exactly one purpose: extracting the data you asked for. Nothing more.

We never sell your data, never share it with third parties for marketing, and never use your documents to train models for other customers.

Purpose-limited processing: documents are used only to deliver extraction results to your workspace.
No third-party sharing: your data is never sold or shared for advertising or marketing.
Deletion on request: remove individual documents or your entire account whenever you choose.
Least-privilege access: production data access is restricted to essential personnel and fully logged.
Automated backups: encrypted backups protect your data against loss without extending its exposure.

Compliance

Built to meet the standards your customers expect

We hold ourselves to recognized frameworks and are transparent about exactly where we stand.

SOC 2

SOC 2 readiness In progress

Our controls for security, availability, and confidentiality are being formalized against the SOC 2 framework, with an independent audit on our roadmap.

GDPR

GDPR alignment In progress

Data-subject rights, purpose limitation, and deletion workflows are built into the product as we complete our GDPR readiness program.

2FA

Two-factor authentication Available

TOTP-based two-factor authentication is available to every user today, protecting accounts even if a password is compromised.

AUDIT

Audit logging Available

Workspace-level audit logs record sensitive document activity, including views, deletions, and exports, giving admins visibility into how data is accessed.

Questions about security?

We're happy to walk your team through our security practices, data handling, and compliance roadmap in detail.

Start Free Read our privacy policy