Trust & security

Your business data, looked after properly

Customers, jobs and payments are the heart of your business. Here’s exactly how Jomioz protects them, in plain English.

At a glance

  • Encrypted connections everywhere (HTTPS)
  • Card details handled by Stripe, never stored by us
  • Two-factor sign-in with an app or an email code
  • Roles and permissions for every team member
  • An audit log of who changed what
  • Job photos and files stored privately in the EU

How we protect your data

The safeguards built into Jomioz, and what they mean for you.

  • Encrypted in transit

    Everything between your device and Jomioz travels over HTTPS. Sensitive connection details, like your QuickBooks link, are also encrypted with AES-256 before we store them.

  • Secure sign-in

    Passwords are hashed, never stored as plain text, and every account confirms its email. Sign-in attempts are rate limited, and you can add two-factor with an authenticator app, an email code or backup codes.

  • Only what each person needs

    Give each team member a role. Hide prices, margins, customer contact details and staff pay from anyone who doesn’t need them, and limit field staff to their own jobs.

  • Payments through Stripe

    Card details are entered on Stripe’s secure checkout and never touch our servers. Payment updates from Stripe are verified before we act on them.

  • Safe customer links

    Client Hub, estimate and invoice links use long random codes that we only store in hashed form. Sign-in links work once and expire, and you can switch a pay link off at any time.

  • Private files, backed up

    Job photos and documents are kept in private storage in the EU and opened through links that expire within minutes. Files are versioned and backed up.

You stay in control

It’s your data. You decide who sees it.

Owners choose who joins the team and what they can do. Nothing is shared between businesses: every request is checked against your workspace before any data comes back.

  • Team access

    Invite people, change their role or remove them from Settings. Custom roles let you switch individual permissions on or off.

  • Audit log

    See who created, changed, sent or deleted customers, jobs, estimates, invoices and settings, with the before and after. Export it as CSV.

  • Export your data

    Download customers, your price list, payments and time records as CSV whenever you like.

  • Close your account

    Close your account from your settings. Your sign-in details are removed and your subscription stops at the end of the period. Invoices and other business records are kept.

Who we work with

The companies that help run Jomioz, and what each one does.

  • Render

    Hosts our servers and database

  • Vercel

    Hosts the Jomioz app and website

  • Amazon Web Services

    Stores files and photos, in the EU (Stockholm)

  • Stripe

    Card payments and subscriptions

  • Resend

    Sends emails for you and for us

  • Sentry

    Error monitoring, in the EU

  • PostHog

    Product analytics, in the EU

  • OpenAI, via Vercel AI Gateway

    AI drafting on Pro, only when you use it

  • Mapbox

    Maps and address search

  • Better Auth

    Sign-in security

  • Google and Apple

    Optional sign-in with your account

  • Xero

    Accounting sync, if you connect it

Our Privacy Policy explains how personal data is handled, and the full list with locations is on our subprocessors page. A data processing agreement is available on request.

Found a security issue?

Tell us at info@jomioz.com. We read every report and will get back to you. Please don’t access or change other people’s data while you look.

Report an issue

Security questions

Where is my data stored?

Files and photos are stored with Amazon Web Services in the EU. Our servers and database are hosted by Render, and the app by Vercel.

Do you store card numbers?

No. Card details go straight to Stripe’s checkout and never reach our servers.

Can I stop field staff seeing prices?

Yes. Roles decide who sees prices, margins, customer contact details and staff pay, and whether someone sees the full schedule or only their own jobs.

Can I turn on two-factor sign-in?

Yes. Turn it on in your account settings and use an authenticator app, an email code or backup codes. We recommend it for anyone who can see customer or payment data.

Does the AI see my customer data?

Only when you use an AI feature. The job details you give it are sent to our AI provider to write the draft, and you check everything before it goes out.

Do you have a certification like SOC 2?

Not yet. We’d rather tell you exactly what we do today than point to a badge.

Run your business on software you can trust

Start free for 14 days. No card needed.

Get started for free

14 days free · No credit card required · Cancel anytime