J-SAS Trust Centre

Security practices you can examine—not just promises you have to trust.

J-SAS protects customer data through a documented security program, independent SOC 2 Type II examination, layered technical safeguards and transparent due diligence.

Request security documentation Review our security controls

Security declaration

Our commitment to responsible data protection.

This declaration states the security commitment that guides how J-SAS operates ProtechSuite. The independent assurance, access controls, encryption, monitoring and operational practices that follow show how we support it.

J-SAS security declaration

We recognize our responsibility to protect the confidentiality, integrity and availability of customer information.

J-SAS maintains administrative, technical and organizational safeguards designed to protect data processed through ProtechSuite against unauthorized access, disclosure, alteration or destruction. Our security program includes documented governance, controlled access, encryption, monitoring, secure development practices and independent assurance.

We review and improve these safeguards as our services, technology and risk environment evolve. No online service is entirely free from risk, and customers remain responsible for their submitted content and for using ProtechSuite in accordance with applicable agreements and law.

Independent assurance

A security program built to stand up to review.

Our controls are designed to support the confidentiality, integrity and availability of the systems and information entrusted to J-SAS.

SOC 2 Type II examined

J-SAS has completed a SOC 2 Type II examination covering the design and operating effectiveness of relevant controls over a defined period. The report and supporting security materials are available to qualified customers and prospects under a non-disclosure agreement.

Request access to assurance documents

SOC 2

Type II examination completed

24/7

Automated monitoring and alerting

MFA

Additional protection for account access

2012

The year J-SAS was founded

Security controls

How we protect ProtechSuite and customer data.

Layered safeguards help reduce risk across infrastructure, application access, development and day-to-day operations.

Security assurance

Documented controls, ongoing internal oversight and independent SOC 2 Type II examination support a repeatable security program.

Data protection and encryption

Customer information is protected with encryption in transit and at rest, supported by secure cloud infrastructure and controlled access.

Identity and access management

Role-based permissions, multi-factor authentication and single sign-on options help ensure people receive only the access they need.

Audit trails and monitoring

Security-relevant actions are logged, while automated monitoring and alerting help our team identify and respond to unusual activity.

Secure software development

Security is incorporated into the development lifecycle through controlled change processes, review and testing before releases reach customers.

Customer data separation

Logical separation and application-level authorization controls help prevent one customer from accessing another customer's information.

Our operating principles

Security is part of how the service operates.

Controls are most useful when they are woven into daily work—not treated as a one-time checklist.

Protect information throughout its lifecycle Apply safeguards to data while it is transmitted, stored, accessed and managed.
Restrict access based on responsibility Use role-based permissions and strong authentication to reduce unnecessary access.
Create evidence of security-relevant activity Maintain audit trails and monitoring so important events can be reviewed.
Support transparent customer due diligence Make appropriate assurance documentation available through a controlled request process.

Core subprocessors

The providers that help us deliver ProtechSuite.

J-SAS uses the following core subprocessors to operate, support and secure the service.

Microsoft Azure provides cloud infrastructure and hosting services used by J-SAS and ProtechSuite.

Cloud infrastructure

Microsoft Azure

Provides cloud computing, database, storage and supporting infrastructure used to operate ProtechSuite.

Elastic Cloud provides hosted search, observability and security-data services used within ProtechSuite.

Search and observability

Elastic Cloud

Provides hosted Elasticsearch services supporting search, observability and security-related data processing within ProtechSuite.

Need more detail about data flows, service scope or our subprocessors? Contact J-SAS and we will help your security or privacy team complete its review.

Security documentation

Get the evidence your review requires.

Qualified customers and prospects can request our SOC 2 report and supporting security information. Sensitive materials are provided through a controlled process and may require a non-disclosure agreement.

Frequently asked questions

Clear answers for your security review.

How secure is J-SAS?

J-SAS uses a documented security program with layered administrative, technical and operational safeguards. Our controls are independently examined through a SOC 2 Type II engagement.

What controls protect customer data?

Controls include encryption in transit and at rest, role-based access, multi-factor authentication, security monitoring, audit trails, controlled change management and secure development practices.

How is customer data separated?

ProtechSuite uses logical separation and application-level authorization controls designed to prevent one customer from accessing another customer's information.

What authentication options are available?

J-SAS supports strong password controls, multi-factor authentication and single sign-on options, including Microsoft and Google identity providers.

How is data encrypted?

Customer information is protected using encryption while transmitted across networks and while stored within the service's supporting infrastructure.

Which subprocessors does J-SAS use?

Core subprocessors include Microsoft Azure for cloud infrastructure and hosting, and Elastic Cloud for hosted Elasticsearch search, observability and security-data services.

How can I obtain the SOC 2 report?

Contact J-SAS to request the report. It is available to qualified customers and prospects through a controlled process and may require a signed non-disclosure agreement.

How long has J-SAS been in business?

J-SAS was founded in 2012 and has supported organizations with security, privacy, compliance and technology risk needs since then.

Have a security, privacy or compliance question?

Send us your due-diligence request and we will help you find the documentation or answer you need.

Contact J-SAS