Curious how we handle your data?
Trust & Security
We know that trusting an AI platform with your social media and brand means trusting us with real data. Here’s how we handle it.
Data storage. Your data is stored in Google Cloud, hosted in the EU (Ireland/London region). Our production application runs on Google Cloud infrastructure via Replit’s managed platform, based in the US, your underlying data storage remains in the EU throughout.
AI providers. Social Jam uses OpenAI and Google Gemini to power content analysis and generation. These providers process content as part of delivering your service; they do not gain independent access to your accounts.
Human oversight. Every piece of content our agents produce is generated in advance and held for your team’s review and approval before it publishes. Nothing goes live without a human in the loop.
Access & infrastructure security. All systems are protected with two-factor authentication, API credentials are stored in a dedicated password manager, and our development and testing environments are kept fully separate from production. Your data is never reachable directly from the internet — only through our application backend.
Backups. Client data is backed up daily and retained for 13 months.
Payments. We never handle or store payment card data directly — all payments are processed securely via Stripe.
Regulatory alignment. We operate on a GDPR-aligned basis and are formalising our Data Processing Agreement documentation. We actively track EU AI Act developments, including upcoming AI-content transparency requirements, as part of our ongoing compliance roadmap.
Where we’re headed. As we scale, we’re working toward independent security certification (SOC 2 / ISO 27001) as part of our roadmap. We’re happy to complete vendor security questionnaires on request.