Question 1

What makes Jeda.ai secure for business use?

Accepted Answer

Jeda.ai (by Dojoit Inc.) is hosted on leading cloud infrastructure providers certified under SOC 2 Type II and ISO 27001 standards, in US data centers, with all traffic authenticated and encrypted (256-bit or stronger at rest, TLS 1.2+ in transit). Access is controlled through granular role-based permissions, passwords are hashed rather than stored in plain text, external penetration tests run periodically, backups run daily, and customer data is never used to train AI models. The enterprise plan adds SSO/MFA, an optional dedicated tenant, additional infrastructure-level protections, and a negotiated SLA.

Question 2

How does Jeda.ai protect my personal data and privacy?

Accepted Answer

Dojoit applies commercially reasonable technical, administrative, and organizational controls, and never sells personal data. You can export or delete your data at any time. The only personal information Jeda.ai processes is your full name and email address — no health, payment card, or other sensitive personal data — and our privacy practices are designed to align with GDPR and CCPA.

Question 3

How is enterprise and customer data encrypted, in transit and at rest?

Accepted Answer

At rest, data is protected with 256-bit or stronger encryption, with each object encrypted by a unique key that is itself encrypted by a regularly rotated master key. In transit, all traffic uses HTTPS with TLS 1.2+ end-to-end, with SSL certificates maintained by Jeda.ai.

Question 4

How are uploaded files and documents stored and protected?

Accepted Answer

Uploaded files and documents are stored with 256-bit or stronger encryption, access is controlled through granular role-based permissions, and none of it is used to train AI models.

Question 5

How are passwords stored and protected?

Accepted Answer

Passwords are hashed and never stored in plain text. The enterprise plan supports a minimum 10-character password policy with required character classes, configurable expiry and reuse prevention, and automatic account lockout after repeated failed login attempts, with reset via verified email. Enterprise users can also use SSO, or email/password plus multi-factor authentication.

Question 6

What is Jeda.ai's data retention and deletion policy?

Accepted Answer

You can delete your data at any time, or ask us to delete it for you. Data belonging to inactive accounts is removed within 5 years, and enterprise customers can request deletion sooner. A documented data-sanitization process applies when a contract ends, and backups are retained on a rolling 35-day basis.

Question 7

Is my data used to train AI models, and do AI sub-processors access it?

Accepted Answer

No — strictly no. Your data is never used to train AI models, under any circumstance. Generative features call large language models hosted on leading third-party AI infrastructure providers in US data centers, and you retain full control of your data throughout. Engineering access to production data is tightly restricted to the on-duty engineer, on a per-need basis, for troubleshooting only.

Question 8

How does Jeda.ai balance AI innovation with enterprise security and privacy?

Accepted Answer

Jeda.ai orchestrates multiple leading third-party-hosted LLMs without ever training on your data — you get the benefit of cutting-edge AI models without your content becoming part of any model's training set.

Question 9

Does Jeda.ai's AI service provide enterprise-grade content governance?

Accepted Answer

Yes. AI usage on Jeda.ai is governed by a hierarchical, enterprise-grade content safety policy applied to every prompt and AI-generated response. Blocked categories include child sexual abuse material, terrorist content, certain violent content, sexual content above configured thresholds, self-harm content, jailbreak attempts, prompt-injection patterns, and, in some configurations, other protected material. These guardrails are enforced in real time on both inputs and outputs.

Question 10

Does Jeda.ai support SSO/SAML provisioning?

Accepted Answer

Yes, on the enterprise plan — SSO via SAML 2.0 and OAuth 2.0/OIDC, with support for leading identity providers. Your IT team can own user provisioning directly.

Question 11

How do workspace owners manage roles and team permissions?

Accepted Answer

On the enterprise plan, SSO plus a dedicated tenant lets your IT/security team own user administration — assigning admin or standard user roles across your organization.

Question 12

What admin visibility and audit logs are available?

Accepted Answer

For enterprise tenants, security events — failed logins, access changes, file access, configuration changes — are logged, centralized, and continuously monitored. These audit logs can be integrated with your SIEM or shared manually to support an incident investigation.

Question 13

How quickly can user or workspace access be revoked?

Accepted Answer

Immediately, in every scenario. A workspace owner can revoke a user's access instantly from within the app. With enterprise SSO, removing a user from your identity provider cuts off their access right away. Jeda.ai personnel who leave the company are deprovisioned immediately as well.

Question 14

How is access to shared workspaces controlled?

Accepted Answer

The owner of a workspace has full control over who can access it — they can invite another user as a contributor or a viewer, change a user's role between the two, or remove a user's access entirely, at any time.

Question 15

How are third-party integrations and API access secured?

Accepted Answer

All service-to-service communication is authenticated and encrypted. Sub-processors are limited to leading cloud infrastructure and AI providers, a payment processor, and authentication providers — each governed by its own audited terms.

Question 16

What protections defend against phishing and account takeover?

Accepted Answer

Multi-factor authentication is available — email one-time codes or an authenticator app — and can be enforced for enterprise users, alongside automatic account lockout on repeated failed logins, token-based session expiry with auto-logout, TLS encryption, and hashed passwords.

Question 17

How does Jeda.ai detect, respond to, and disclose security incidents?

Accepted Answer

A trained incident-response team, which runs through response exercises annually, responds within 6 hours of a report to support@jeda.ai. For a confirmed breach, enterprise customers are notified at their named contacts, per the terms of their agreement.

Question 18

Does Jeda.ai run penetration tests and have a vulnerability disclosure process?

Accepted Answer

Yes — external penetration tests are run prior to production releases, vulnerability scans run with every major release alongside ongoing infrastructure scanning, and source code is scanned continuously. Penetration-test results can be shared under a signed NDA.

Question 19

How does Jeda.ai secure its cloud infrastructure?

Accepted Answer

Jeda.ai runs on leading cloud infrastructure providers, certified under SOC 2 Type II and ISO 27001 standards, in US data centers, with one application instance per data center and all traffic authenticated and encrypted. Our infrastructure providers handle firewall/network controls and physical security, and enterprise customers can enable additional protections. A high-level architecture and data-flow diagram is available under NDA.

Question 20

How does Jeda.ai back up data and ensure business continuity?

Accepted Answer

Backups run daily and are retained on a rolling 35-day basis. An on-duty engineering team continuously monitors availability and capacity, and the platform keeps functioning — aside from generative AI features specifically — even if an underlying LLM provider becomes unavailable.

Question 21

What is Jeda.ai's uptime, and where is the status page?

Accepted Answer

A live status page is published at jeda.ai/resources/ai-status, and an on-duty engineering team monitors availability continuously. Free and paid self-serve plans run on a best-effort basis; a formal uptime SLA is negotiated as part of an enterprise contract.

Question 22

Can organizations choose their data residency region?

Accepted Answer

Today, all customer data resides in US data centers with our cloud infrastructure providers. Enterprise customers can discuss an alternative deployment region based on their specific requirements.

Question 23

Does Jeda.ai offer private, dedicated, or single-tenant deployment?

Accepted Answer

Yes. Enterprise customers can choose a dedicated-tenant cloud deployment with per-customer unique-key encryption, or a fully single-tenant deployment on a physically isolated instance.

Security FAQ

Overview & Security Posture

Data Protection & Privacy

AI & Privacy

Identity & Access Management

Collaboration & Sharing

Threat Protection & Incident Response

Infrastructure & Resilience

Deployment & Data Residency

Still have questions?