Security
What is in place, and what is not.
Jon Croft does not hold SOC 2 or any other security certification. This page describes the controls that are in the product today.
Where data is hosted
Customer data is hosted primarily in the United States. The database, stored files, and sandbox for a workspace run in AWS us-east-1. The app can be configured with an EU region. That region is not enabled. Some providers, such as email forwarding and AI model providers, may process data elsewhere. Mail sent to @joncroft.si addresses is relayed through infrastructure in France.
Tenant isolation
Workspace rows are separated with database row-level security. A private conversation is visible to the person who started it. A shared conversation is visible to the people in that workspace. The sandbox is allocated to the workspace. Slack, Meta, and other connection tokens are encrypted with AES-256-GCM. Passwords are stored as a hash. The session cookie is HttpOnly.
Deleting data
Settings has Delete account. You type DELETE. That cancels the Stripe subscription, revokes Slack and integration tokens, and deletes workspaces you alone own. Billing records the law requires are kept, without your name on the account. Uninstalling the Slack app, or revoking its bot token, deletes the Slack thread content stored for that install. Meta can call the data-deletion callback. Instructions are on the data deletion page.
Contact
Security reports go to security@joncroft.si. The terms, privacy policy, and sub-processor list are on the app.