Last updated: November 18, 2024

When you choose Jelly, we know that you are trusting us to keep your data private and secure. Here are some of the things we do to keep your data secure.

Data and Infrastructure

Our primary data storage and infrastructure relies on a combination of Render and AWS, both of which are SOC 2 Type 2 accredited and ISO 27001 certified cloud infrastructre platforms. These operations are highly redunandant and data is stored in facilities with strong physical security and feature safeguards to protect customer privacy.

Email Deliverability

To ensure successful deliverability of email into and out of your account, we rely on Postmark as a mail infrastructure provider. Postmark supports TLS encryption on all inbound and outbound email.

Billing Data

All customer payments are processed using Stripe, a worldwide leader in payment processing. All credit card data is entered directly to Stripe and we don't have access to full credit card details at any point.

Additional Highlights

  • Our team can only access an account’s data if they have explicit permission from an account owner or the account is in review for compliance with the Jelly Terms of Use.
  • All customer data access is required to be logged before data can be decrypted for support.
  • All access to Jelly is secured over SSL (HTTPS), ensuring the information is encrypted in transit.
  • All passwords are stored encrypted, using one-way cryptographic hashing.
  • We offer two factor authentication for all Jelly plans and encourage you to use it.
  • Our team has two factor authentication turned on for all of the tooling we use to support your account.
  • Our privacy policy and DPA outline additional privacy rights afforded to you.
  • A full list of our subprocessors is available for your reveiew.

If you have any questions about any of our policies or procedures, please feel free to reach out to security@letsjelly.com for more information.