Jiminny provides a cloud-based conversation intelligence service, using customer information from a CRM to log activity, transcribe and analyze conversations for note-taking, coaching, and deal insight.
​
We would like to make two things clear. First, we respect your privacy and make significant efforts to protect all your data. Second, we would never do anything with your data that we wouldn’t be proud to tell the world about.
​
Keeping our customers' data secure is the most important thing that Jiminny does. We go to considerable lengths to ensure that all data sent to Jiminny is handled securely - keeping Jiminny secure is fundamental to our business.
​
As you continue to learn more about Jiminny we recommend you also review our Terms of Use, our Privacy Notice, and our Trust Center, where our current reports and assessments are available.
​

AWS provides an extensive list of compliance and regulatory assurances, including SOC 1-3, and ISO 27001. See Amazon’s compliance and security documents for more information.
​

We are proud to maintain an uptime of 99.95% or higher. You can check our past stats on our status page.
​
Our telephony services are operated by Twilio, a leader in cloud-based telecommunications. Twilio have international reach, integrating with over 1000 carriers, and are bound by a 99.95% uptime SLA. You can check this performance on their status page.
​

All customer data is stored in the USA or Europe, depending on the choice of the customer. See Data storage at Jiminny for details on residency, and Data Retention for how long we keep it.
​
Customer data is stored in multi-tenant data stores, we do not have individual data stores for each customer. However strict privacy controls exist in our application code to ensure data privacy and prevent one customer from accessing another customer's data.
​
We have many unit and integration tests in place to ensure these privacy controls work as expected. These tests are run every time our codebase is updated and even one single test failing will prevent new code from being shipped to production.
​
The third parties that process customer data on our behalf are listed in our Subprocessors article, which is kept current.
​

All data sent to or from Jiminny is encrypted in transit using 256-bit encryption.
​
Media playback has additional layers of security to prevent sources from being shared outside of the Jiminny platform. These include IP address restrictions and time-sensitive cookies scoped to each authenticated Jiminny user.
​
Our API and application endpoints are TLS/SSL only and score an "A+" rating on SSL Labs' tests. This means we only use strong cypher suites and have features such as HSTS and Perfect Forward Secrecy fully enabled.
​

Jiminny is served 100% over HTTPS.
​
We have two-factor authentication (2FA) and strong password policies on the third-party cloud services we rely on, including GitHub, Google, AWS, Twilio, and Intercom.
​
Jiminny does not store passwords. SAML2 single sign-on (SSO) allows you to authenticate users in your existing identity provider without requiring them to enter additional login credentials. SSO is available through providers including Google Workspace, Office 365, HubSpot, Pipedrive, and Salesforce. If you use Google or Microsoft based authentication, you can additionally turn on 2FA.
​

Jiminny enables permission levels to be set for any employees with access to our service.
​
Permissions and access can be set to include app settings, billing, user data, or the ability to listen back to recorded media.
​

Jiminny maintains a SOC 2 Type II report and engages external auditors to perform regular penetration testing. Our current reports and assessments are available in our Trust Center.
​
Continuous monitoring runs across our infrastructure using AWS GuardDuty and AWS CloudTrail, providing an audit trail over our infrastructure and the Jiminny application. Auditing allows us to do ad-hoc security analysis, track changes made to our setup, and audit access to every layer of our stack.
​

International data transfers. Jiminny participates in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, as administered by the U.S. Department of Commerce. Our participation covers the collection, use, and retention of non-HR personal data transferred from the European Union, the United Kingdom, and Switzerland to the United States, and can be verified on the Data Privacy Framework List. Where the Data Privacy Framework does not apply, transfers are governed by the Standard Contractual Clauses included in our Data Processing Agreement.
​
​SOC 2 Type II. Jiminny maintains a SOC 2 Type II report, available under NDA through our Trust Center.
​
​GDPR. Jiminny acts as a data processor for customer conversation data and has aligned its products, processes, and procedures with its obligations under the GDPR. Our Data Processing Agreement is available on request from privacy@jiminny.com. See How we comply with the GDPR.
​
​CCPA. Jiminny maintains compliance with the CCPA and does not sell or share personal information.
​
​HIPAA. Jiminny supports HIPAA-compliant use of the platform, including a Business Associate Agreement for customers who require one.
​
​Recording consent. The platform includes features that help customers meet their own recording obligations, including pre-meeting consent management and in-call audio notifications. See Meeting Recording Consent.
​

We maintain security policies that are communicated and approved by management to ensure everyone knows their security responsibilities. Our policies are audited annually.
​
Software development is done through a documented SDLC process. Design of all new product functionality is reviewed by our security team. Senior engineers conduct mandatory code reviews for code changes and periodic in-depth security reviews of architecture and sensitive code. We operate separate environments for development, staging, and production.
​
Annually our engineers participate in secure code training covering OWASP Top 10 security flaws, common attack vectors, and other security controls.
​

Earning and keeping the trust of our customers is our top priority, so we hold ourselves to the highest privacy and security standards. If you have discovered a security or privacy issue that you believe we should know about, we would love to hear from you.
​
Please reach out to us at security@jiminny.com.
​
​This brief was last reviewed in August 2026.