Document Library

Public documents are available below. Request access to unlock NDA and restricted materials.

Unlock the full JIFFYAI security library — SOC 2, ISO 27001, HIPAA reports and more

Bulk downloads include a signed manifest.json with SHA-256 hashes. See VERIFY.md inside any ZIP for verification instructions.

Showing 1–25 of 32
ReportsPublic

Certifications overview

SOC 2, ISO 27001:2022, HIPAA, GDPR, ISO 27701, ISO 42001 upcoming, CSA STAR in progress

SHA-256:a3605ce4aa41Verify
ReportsPublicValid through Jan 1, 2027

Security Overview

ReportsPublic

Security Whitepaper

SHA-256:634140ff2dc6Verify
ReportsPublic

Terms of Service

SHA-256:18ad78e77e5cVerify
AI GovernanceNDA Required

AI Impact Assessment Summary

SHA-256:c17609de5c7aVerify
AI GovernanceNDA Required

ISO 42001 Readiness Summary

SHA-256:eb4f8869c2d0Verify
CertificationsNDA RequiredValid through Oct 25, 2026

GDPR Report 2025

GDPR compliance assessment.

SHA-256:a7ac64f969f6Verify
CertificationsNDA RequiredValid through Oct 25, 2026

HIPAA Report 2025

HIPAA Compliance Assessment Report

SHA-256:564d84547a29Verify
CertificationsNDA RequiredValid through Jun 30, 2027

ISO 27001 Certificate

Information security management certification.

SHA-256:ef7d9e4c56c6Verify
CertificationsNDA RequiredValid through Oct 25, 2026

SOC 1 Type II Report - 2025

SOC 1 Type II assessment report (Oct 2025 - Oct 2026)

SHA-256:19f1763f69e0Verify
CertificationsNDA RequiredValid through Oct 25, 2026

SOC 2 Type II Report - 2025

SOC 2 Type II assessment report (Oct 2025 - Oct 2026)

SHA-256:78d31da3815fVerify
Data SecurityNDA Required

Business Continuity & DR Summary

SHA-256:94c447afeaffVerify
Data SecurityNDA Required

Physical Security Statement

SHA-256:9640f1fcb89eVerify
Legal TemplatesNDA Required

Business Associate Agreement (BAA)

SHA-256:c41e6d9e55f1Verify
Legal TemplatesNDA Required

Data Processing Agreement (DPA)

The current sub-processor list (Annex 2) is available publicly at /sub-processors without NDA.

SHA-256:1f5595d924e2Verify
PoliciesNDA Required

Access Control Policy

SHA-256:08fdbd0af976Verify
PoliciesNDA Required

Agent Lifecycle and Agentic AI Architecture

SHA-256:c21c6efbdddeVerify
PoliciesNDA Required

AI Usage Policy

SHA-256:d38fbceb0a08Verify
PoliciesNDA Required

Backup, Retention & Recovery Policy

SHA-256:a5e588e3e461Verify
PoliciesNDA Required

Cybersecurity Programme

SHA-256:060c244e0907Verify
PoliciesNDA Required

Data Breach Notification Procedure

SHA-256:7ec4f821f13aVerify
PoliciesNDA Required

Data Classification Policy

SHA-256:16dcbd98c4e2Verify
PoliciesNDA Required

Encryption Policy

SHA-256:585012e1f56eVerify
PoliciesNDA Required

Incident Response Policy

SHA-256:e90ef9220d7aVerify
PoliciesNDA Required

Information Security Policy

SHA-256:6141ec5024f7Verify
Page 1 of 2

Can't find what you need? Contact our security team at ciso@jiffy.ai or request a call to discuss your specific requirements.