Security and compliance
at JIFFYAI
Independently audited, continuously monitored, and built for the security requirements of Tier-1 financial institutions.
Our certifications
Every certification reflects real operational controls, not paper compliance.
SOC 2 Type II Compliance
Annual independent examination of our security, availability, and confidentiality controls. The current report is available to customers and prospects under NDA upon request.
SOC 1 Type II Compliance
Annual examination of controls relevant to customer financial reporting, demonstrating our commitment to transparency and accountability in financial processes.
ISO/IEC 27001:2022 Certification
Certified to the 2022 edition of the international standard for Information Security Management Systems — the current and most stringent version of the standard, covering our cloud infrastructure, product development, and customer data operations.
ISO 27701 Certification
Privacy extension to ISO 27001, establishing our Privacy Information Management System (PIMS). Demonstrates compliance with GDPR and global data privacy requirements for both PII Controllers and Processors.
GDPR Compliance
Compliant with the EU General Data Protection Regulation. We design our platform with data minimisation principles and have updated our Privacy Policy, Cookie Policy, and Terms of Service in alignment with GDPR requirements.
HIPAA Compliance
Aligned with US Federal standards for protecting sensitive healthcare information. Business Associate Agreements (BAAs) are available for customers in healthcare-adjacent industries.
ISO 42001 — AI Management System
JIFFYAI is among the first enterprise automation SaaS providers to pursue ISO 42001 — the world's first international standard for AI governance. Implementation is complete with a certification audit scheduled for August 2026.
CSA STAR — Cloud Security
JIFFYAI has submitted the Cloud Security Alliance STAR self-assessment, with our registry listing in progress. CSA STAR provides cloud-specific transparency beyond ISO 27001, addressing shared responsibility and data residency controls.
Trusted by our clients and partners
