Trust center.
No badges we have not earned. This page says exactly what we do with your data and where it lives, in plain language.
Hosting
The application and database run on Hetzner Cloud in Germany and Finland, inside the European Union. Uploads and rendered exports are stored in EU-region S3-compatible object storage. The web front end is served by Netlify's edge network; no customer data is stored there.
Encryption
All traffic uses TLS 1.2 or higher. Database volumes and backups are encrypted at rest. Share links carry a hashed secret; passwords on share links are hashed, never stored in clear text.
Access control
Workspaces are invite-only. Four roles apply: viewer, editor, admin and owner. Every significant change is written to a workspace audit log; an extract is available on request. Our staff have no day-to-day access to customer workspaces. A platform administrator can grant access to resolve a support issue, and every such grant is written to the same log.
AI and third parties
The research hub and map drafting use Anthropic's Claude through its API. Content you submit is processed to return a result and is not used to train models. AI features can be switched off per workspace by an admin, and globally by us. Google Sheets and Jira connections use per-workspace OAuth that an admin can disconnect at any time. Disconnecting Google asks Google to revoke the token and deletes our copy; disconnecting Jira deletes the tokens we hold, and the grant itself stays in your Atlassian account until you remove it there. Error monitoring uses Sentry with personal data scrubbed.
Backups and continuity
The database is dumped every night. Daily dumps are kept for a week, weekly dumps for a month and monthly dumps for six months, and an encrypted copy of the dumps is written to object storage every night, away from the database server. Version snapshots inside the product (the last 50 per map) are separate from infrastructure backups and are under your control.
Your data, your exit
Export any map as vector PDF or PNG and the portfolio as CSV at any time. A full workspace export in open formats is available on request. Deleting a workspace deletes its data from live systems immediately and from backups within the retention window.
Agreements and certifications
Our privacy policy names every processor we use and where it runs. Our data processing agreement is part of the terms and applies to every workspace, no signature needed. We do not currently hold SOC 2 or ISO 27001 certification; we will pursue it when customers need it for procurement and will say so here when it happens.
Reporting a problem
Security reports go to security@journima.com. We acknowledge within two working days.
See your journeys take shape.
Start your free 14-day trial. No card needed.