TRUST AND SECURITY
Security isn't an afterthought. It's the foundation.
We built Jump for financial professionals, which means your data is protected and your compliance obligations are met. Our dedicated Security team makes sure of it.
COMPLIANCE
Verified year-round
We maintain SOC 2 Type II compliance, assessed by an independent third-party auditor across a continuous 12-month period.
DATA HANDLING
Your data stays protected – and stays yours.
Your data stays encrypted.
Your data is encrypted at rest and in transit using industry-standard encryption. We store your data, including backups, in the region you designate.
Your data stays yours.
We take a multi-tenant approach with strict logical data separation, so your data never commingles with another customer's.
We protect sensitive financial information
Because Jump is purpose-built for financial professionals, we support automatic redaction of Non-Public Information (NPI) and personally identifiable information (PII) from meeting transcripts.
Your data belongs to you.
We don't sell it, monetize it, or use it for advertising. Your meeting recordings, transcripts, and summaries are never used for training or fine-tuning.
SECURITY PROGRAM
Protecting your data starts with how we build.
Secure by development
Our production code requires independent peer review before it's shipped and every change goes through static application security testing (SAST) to identify code vulnerabilities. We engage an independent third party for annual penetration testing.
We monitor continuously
We apply a zero-trust approach to our cloud infrastructure, treating all connections as potentially hostile by default. We run continuous vulnerability scanning and threat detection, with real-time alerts routed to our Security team.
We plan for the unexpected
Jump leverages multiple availability zones for redundancy. We have a formal, documented business continuity and disaster recovery program, and regularly test our ability to recover in a timely manner. We make a transparent, real-time view of our application availability on our status page.
Our people are part of our security posture.
Every employee goes through a background check, signs a confidentiality agreement, and completes security awareness training. All employees work on managed devices.
Product security
Configurable to match your compliance policy
Jump offers admin controls to enable customers with greater control over their data. Customers may define custom retention periods, configure role-based access controls, and manage compliance-supporting obligations like recording disclosures and consent. Jump supports SSO and SCIM provisioning.
AI Governance
AI you can put in front of clients
AI never trains on your data
Jump does not use customer data to train, fine-tune, or improve any AI model. Our Data Processing Agreements with model providers include zero-retention and no-training clauses.
Human in the loop
Jump drafts and proposes emails, CRM updates, and follow-ups, then stops. Nothing reaches a client or a system of record until an advisor has reviewed and approved it.
Your firm sets the rules for AI
Configure access, workflows, capture, and storage to align with your firm’s policies and supervisory requirements.
Privacy
Privacy from the ground up
We build privacy by design
Privacy isn't layered on after the fact — it's embedded in how we design and build our systems. We apply data minimization, access controls, and encryption throughout every stage of the development cycle.
We align with global privacy law
Jump processes personal data in accordance with GDPR, PIPEDA, and other applicable privacy law and regulations. We maintain a Data Processing Agreement (DPA) that defines our personal data handling obligations.
We are transparent with data handling
We detail how we handle personal data in our Privacy Policy, which also describes how individuals can exercise their privacy rights.
View our Trust Center
Our SOC 2 Type II report, penetration test reports, and all other available documentation are available at Jump's Trust Center — no sales call required.
