Security & privacy
Protecting the information families depend on.
Josda handles sensitive estate, financial, and family information. Security is foundational to how we design, operate, and support the platform. Here are the protections and practices behind that commitment.
Protect information at every stage.
- Encryption
- Customer information is encrypted in transit and at rest.
- Access controls
- Customer accounts require two-factor authentication. Household and firm access is permissioned, and administrative access is restricted to authorized personnel.
- Data isolation
- Application and database access controls, including row-level security, help segregate customer records.
- Cloud infrastructure
- Josda runs on Amazon Web Services and uses established cloud services for its infrastructure.
Security depends on how the platform is operated.
- Development
- Production changes follow controlled, version-managed practices with limited administrative access.
- Backups
- Customer data is backed up at least daily. Backup retention is 30 days. This refers to backup copies—not a promise that all customer data is deleted after 30 days.
- Incident readiness
- Written information security, incident response, and business-continuity/disaster-recovery procedures support operating discipline.
- Vendors
- External service providers are subject to vendor-management processes appropriate to their access to data.
AI assists the work. People remain responsible for decisions.
Josda uses AI-assisted features to help users work with estate information, understand tasks, and locate relevant content. Josda does not use customer data to train its AI models, and the external AI providers used by Josda do not train on Josda customer data. Output should be reviewed where appropriate, and the system does not replace legal, tax, investment, or other professional advice.
Need information for your security review?
Advisory firms and their compliance teams may need additional detail about controls, privacy, data handling, and vendors. We can provide appropriate materials and respond to diligence questions.