Trust and security
Curious how we handle your data?
Data storage
Your data is stored in Google Cloud, hosted in the EU (Ireland/London region). Our production application runs on Google Cloud infrastructure via Replit's managed platform, based in the US; your underlying data storage remains in the EU throughout.
AI providers
Social Jam uses OpenAI and Google Gemini to power content analysis and generation. These providers process content as part of delivering your service; they do not gain independent access to your accounts.
Human oversight
Every piece of content our agents produce is generated in advance and held for your team's review and approval before it publishes. Nothing goes live without a human in the loop.
Access and infrastructure security
All systems are protected with two-factor authentication, API credentials are stored in a dedicated password manager, and our development and testing environments are kept fully separate from production. Your data is never reachable directly from the internet, only through our application backend.
Backups
Client data is backed up daily and retained for 13 months.
Payments
We never handle or store payment card data directly. All payments are processed securely via Stripe.
Regulatory alignment
We operate on a GDPR-aligned basis and are formalising our Data Processing Agreement documentation. We actively track EU AI Act developments, including upcoming AI-content transparency requirements, as part of our ongoing compliance roadmap.
Where we're headed
As we scale, we're working toward independent security certification (SOC 2 / ISO 27001) as part of our roadmap. We're happy to complete vendor security questionnaires on request.
Need a security questionnaire completed?
Contact us and we'll work through it with your team.