ISO 27001 certified. Here’s what that means for your data.

Security

Jiffi is certified to ISO/IEC 27001:2022, the international standard for information security, and is independently audited every year. We spend our days inside your systems: your Deputy, your payroll, your automations, your code. You shouldn’t have to take our word that your data’s safe with us. So we got audited, and we show our homework.

Book a clarity call

Our certifications

Our certificate and the controls behind it are public at trust.jiffi.co. Customers can request more detail there.

No 200-question spreadsheet. No three-week wait.

Check our Trust Centre

Who is this for?

You’re letting a vendor into your business. Your rosters, your payroll, your staff records, your code. Your clients, your board or your insurer will ask who checked them. One wrong person with the wrong access is all it takes.

You’re building something of your own. AI means anyone can now build a real app. But before real customer data goes in, someone needs to check it properly, and that someone should hold themselves to the same standard.

Either way, you’re trusting someone with the keys. We’re audited every year, so you know exactly how they’re looked after.

Why trust Jiffi with your data?

People and contractors

Our team, and anyone with privileged access, completes security training when they join and every year after. Contractors sign confidentiality terms before getting any access, and anyone with privileged production access is background checked.

Access and devices

Access is reviewed regularly and removed within 24 business hours when someone leaves. Confidential data is only stored on devices that are encrypted and monitored.

Secure development

Significant code changes are peer-reviewed before they reach production, with separate development, test and live environments. Secrets are kept in encrypted secret stores, not in code, wherever the platform allows.

Changes to your systems

Every request is logged and approved in writing by your business before we make the change. In a genuine emergency we can act on documented verbal approval, then confirm it in writing.