Private by default. Encrypted by design.

JamDocs encrypts vault secrets at rest with AES-256 and all data in transit over HTTPS. Every space and document is private by default, and access is granted through admin, editor, and viewer roles, so a teammate sees nothing until you share it. Every workspace keeps an audit log that admins can export.

Start free
ENCRYPTION

Encrypted in transit and at rest

All workspace data is encrypted in transit over HTTPS, and secrets stored in the vault are encrypted at rest with AES-256. Keys and credentials live beside the docs that use them, never in a plaintext chat thread.

ACCESS CONTROL

Private by default, least privilege

Every space and document is private by default. Access is granted explicitly through admin, editor, and viewer roles, so a teammate sees nothing until you share it. Vault secrets honor the same roles, so only authorized members can reveal a value.

ENTERPRISE

Audit logs, with SSO and SCIM planned

Every workspace keeps an audit log of access and changes that admins can review and export as CSV. Single sign-on (SSO) and SCIM provisioning are planned for the Enterprise plan but are not available yet.

Need a security review or DPA?

Enterprise teams can request our security documentation, data-processing agreement, and a walkthrough with the team.

Security questions, answered

How does JamDocs secure secrets and API keys?

Secrets stored in the JamDocs vault are encrypted at rest with AES-256 and live beside the docs that use them. Access is governed by the same granular roles and permissions as the rest of the workspace, so only authorized members can reveal a value, and everything is private by default.

Is JamDocs private by default?

Yes. Every space and document in JamDocs is private by default. Access is granted explicitly through roles (admin, editor, and viewer), so nothing is visible to a teammate until you share it. This least-privilege model means new content is never accidentally exposed.

Does JamDocs support SSO and SCIM?

Not yet. Single sign-on (SSO) and SCIM user provisioning are planned for the Enterprise plan but are not available today. JamDocs accounts sign in with email and password, with optional two-factor authentication, and every workspace keeps an audit log of access and changes that admins can review and export.

Is JamDocs data encrypted?

Yes. All workspace data is encrypted in transit over HTTPS, and secrets stored in the vault are also encrypted at rest with AES-256. Access to every space follows the same private-by-default roles, and each workspace keeps an audit log of access and changes that admins can export.