Is my data used to train AI models?

Customer content is not used to train Jarel models. Model providers are configured not to train on it where their terms support that.

Where is my data stored?

Workspace data is stored in Dublin, Ireland. Some processors, including our AI model provider, process data outside the EU. The subprocessor list shows where.

Who can see my documents?

Only people in your workspace. Storage and access are scoped to the workspace, and reads, writes and AI calls are logged where available.

Is Jarel SOC 2 certified?

Not yet. SOC 2 Type II, ISO 27001 and ISO 42001 are planned; no audit has started and no report exists. The status rows above say exactly where each one stands.

Can I get a data processing agreement or a security review?

Yes. Both are available on request. Write to security@jarel.se.

Security

Your documents stay yours.

Privileged files, PII, and draft strategy. Not used to train Jarel models. Encrypted in transit and at rest. Stored in the EU.

جرب Jarel مجانا احجز عرضاً توضيحياً

Free to start. No credit card.

Controls

How your work is kept safe.

01
No training on customer content
Customer content is not used to train Jarel models. Model providers are configured not to train on it where their terms support that.
02
Encryption in transit and at rest
Sensitive legal materials are encrypted in transit and at rest. Advanced key management is discussed for eligible enterprise deployments.
03
Stored in the EU
Workspace data is stored in Dublin, Ireland. Some processors, including our AI model provider, process data outside the EU. The list below shows where, and the data processing agreement covers transfers.
04
Access you can review
Workspace access is authenticated. Reads, writes, and AI calls are logged where available, so sensitive work stays traceable.

Where we are.

Supported, available, or planned. Status is written as it stands. No audit is under way and no report exists yet.

System status and uptime

GDPR supportSupported
Data processing agreementAvailable
SOC 2 Type IIPlanned
ISO 27001Planned
ISO 42001Planned

Who processes the work.

The current subprocessor list, derived from what the product actually calls. Material changes are shared with customers in advance.

Data processing agreement Contact security

Used whenever you use Jarel

These handle workspace data in the normal course of the product.

Used whenever you use Jarel: subprocessors, their purpose, the data they see and region
Vendor	Purpose	Data	Region
Supabase	Database, sign-in and file storage	Account details, workspace content, uploaded documents, audit log	EU (Dublin, Ireland)
Vercel	Hosting, edge network and the AI Gateway that routes model requests	All requests to the app, including prompts and documents in transit	EU (Dublin) for the application; the edge network is global
OpenAI	Text generation (GPT-6 Luna), voice and embeddings	Prompts, document excerpts, audio for voice	US
Cohere, through the Vercel AI Gateway	Reranks search results so the best passages reach the model	Search queries and the retrieved passages	To be confirmed
Inngest	Runs background jobs such as document processing and routines	Job parameters such as workspace, document and task identifiers	To be confirmed
Sentry	Error monitoring	Error reports with emails, tokens and document text scrubbed	EU (Germany)
Resend	Transactional email such as invites and notices	Recipient name and email, and the message sent	EU / US
Stripe	Subscriptions and payments	Billing contact, plan and payment details; card data stays with Stripe	To be confirmed
PostHog	Product analytics	Pseudonymous usage events with allow-listed properties	EU
Cloudflare	Bot protection (Turnstile) on sign-in and public forms	IP address and browser signals during the challenge	To be confirmed
Managed Redis for rate limiting	Counters that cap request rates	Request counters keyed by user or IP address	To be confirmed

Used only with the feature

These see workspace data only when a member or an admin uses the feature, or the switch is on.

Used only with the feature: subprocessors, their purpose, the data they see and region
Vendor	Purpose	Data	Region
Mixedbread	Document search indexing, and a fallback reranker	Text of public and internal documents when indexing is switched on; queries and passages when it reranks. Never documents marked confidential or restrictedDocument indexing is a deployment switch and is off unless enabled. Reranking is the fallback if the primary reranker is unavailable.	To be confirmed
Composio	Connects the apps and plugins you choose	The action you approve and the connection to your account in that appWhen a member connects an app or runs a plugin action.	To be confirmed
Fly.io	Isolated browser sessions for agent computers	Pages the agent opens, files it downloads and the saved sign-ins you addOnly for workspaces with agent computers enabled.	To be confirmed
Expo	Delivers push notifications to the Jarel mobile app	Device push token and the notification textWhen a member turns on notifications in the mobile app.	To be confirmed
Google and Apple sign-in	Sign-in for members who choose it	Name and email address from the account you pickWhen a member signs in with Google or Apple.	To be confirmed
Apple App Store	Mobile in-app subscriptions	Purchase and subscription receipts for the accountWhen a plan is bought through the iOS app.	To be confirmed
Typesafe (Jev), through the Vercel AI Gateway	Quick yes or no checks that decide how an agent proceeds	Structured agent state, such as the task and recent stepsOnly when the JEV_DECISIONS_ENABLED switch is on. It is off by default.	To be confirmed

Website visitors only

These never see workspace data. They apply to visitors of jarel.se.

Website visitors only: subprocessors, their purpose, the data they see and region
Vendor	Purpose	Data	Region
Google (Tag Manager, Analytics, Ads)	Website analytics and advertising measurement	Pseudonymous page views and ad clicks on jarel.seOnly on the public website, and only after the visitor accepts the cookie banner.	To be confirmed
Meta	Advertising measurement (Meta Pixel)	Pseudonymous page views and ad clicks on jarel.seOnly on the public website, and only after the visitor accepts the cookie banner.	To be confirmed

Updated 9 October 2026. “To be confirmed” means we have not yet checked that detail with the vendor, and we would rather say so than guess. Ask security@jarel.se for the vendor agreements we hold.

FAQ

Questions about security.

Is my data used to train AI models?
Customer content is not used to train Jarel models. Model providers are configured not to train on it where their terms support that.
Where is my data stored?
Workspace data is stored in Dublin, Ireland. Some processors, including our AI model provider, process data outside the EU. The subprocessor list shows where.
Who can see my documents?
Only people in your workspace. Storage and access are scoped to the workspace, and reads, writes and AI calls are logged where available.
Is Jarel SOC 2 certified?
Not yet. SOC 2 Type II, ISO 27001 and ISO 42001 are planned; no audit has started and no report exists. The status rows above say exactly where each one stands.
Can I get a data processing agreement or a security review?
Yes. Both are available on request. Write to security@jarel.se.

أعطه أول مهمة لك.

مجاني للبدء، بلا بطاقة ائتمان. اربط مستنداتك واقرأ العمل مع مصادره قبل إرسال أي شيء.

مثال على مهمة: راجع غرفة البيانات وأخبرني بما يعيق التوقيع في 16 أكتوبر.

جرب Jarel مجانا

01أنشئ حسابا مجانيا
02اربط مستنداتك
03سلم مهمة

تطرح الأداة على فريق؟ احجز جولة إرشادية.

Jarel

Vendor

Purpose

Data

Region

Supabase

Database, sign-in and file storage

Account details, workspace content, uploaded documents, audit log

EU (Dublin, Ireland)

Vercel

Hosting, edge network and the AI Gateway that routes model requests

All requests to the app, including prompts and documents in transit

EU (Dublin) for the application; the edge network is global

OpenAI

Text generation (GPT-6 Luna), voice and embeddings

Prompts, document excerpts, audio for voice

Cohere, through the Vercel AI Gateway

Reranks search results so the best passages reach the model

Search queries and the retrieved passages

To be confirmed

Inngest

Runs background jobs such as document processing and routines

Job parameters such as workspace, document and task identifiers

To be confirmed

Sentry

Error monitoring

Error reports with emails, tokens and document text scrubbed

EU (Germany)

Resend

Transactional email such as invites and notices

Recipient name and email, and the message sent

EU / US

Stripe

Subscriptions and payments

Billing contact, plan and payment details; card data stays with Stripe

To be confirmed

PostHog

Product analytics

Pseudonymous usage events with allow-listed properties

Cloudflare

Bot protection (Turnstile) on sign-in and public forms

IP address and browser signals during the challenge

To be confirmed

Managed Redis for rate limiting

Counters that cap request rates

Request counters keyed by user or IP address

To be confirmed

Vendor

Purpose

Data

Region

Mixedbread

Document search indexing, and a fallback reranker

Text of public and internal documents when indexing is switched on; queries and passages when it reranks. Never documents marked confidential or restrictedDocument indexing is a deployment switch and is off unless enabled. Reranking is the fallback if the primary reranker is unavailable.

To be confirmed

Composio

Connects the apps and plugins you choose

The action you approve and the connection to your account in that appWhen a member connects an app or runs a plugin action.

To be confirmed

Fly.io

Isolated browser sessions for agent computers

Pages the agent opens, files it downloads and the saved sign-ins you addOnly for workspaces with agent computers enabled.

To be confirmed

Expo

Delivers push notifications to the Jarel mobile app

Device push token and the notification textWhen a member turns on notifications in the mobile app.

To be confirmed

Google and Apple sign-in

Sign-in for members who choose it

Name and email address from the account you pickWhen a member signs in with Google or Apple.

To be confirmed

Apple App Store

Mobile in-app subscriptions

Purchase and subscription receipts for the accountWhen a plan is bought through the iOS app.

To be confirmed

Typesafe (Jev), through the Vercel AI Gateway

Quick yes or no checks that decide how an agent proceeds

Structured agent state, such as the task and recent stepsOnly when the JEV_DECISIONS_ENABLED switch is on. It is off by default.

To be confirmed

Vendor

Purpose

Data

Region

Google (Tag Manager, Analytics, Ads)

Website analytics and advertising measurement

Pseudonymous page views and ad clicks on jarel.seOnly on the public website, and only after the visitor accepts the cookie banner.

To be confirmed

Your documents stay yours.

How your work is kept safe.

No training on customer content

Encryption in transit and at rest

Stored in the EU

Access you can review

Where we are.

Who processes the work.

Used whenever you use Jarel

Used only with the feature

Website visitors only

Questions about security.

Is my data used to train AI models?

Where is my data stored?

Who can see my documents?

Is Jarel SOC 2 certified?

Can I get a data processing agreement or a security review?

أعطه أول مهمة لك.

Your documents stay yours.

How your work is kept safe.

No training on customer content

Encryption in transit and at rest

Stored in the EU

Access you can review

Where we are.

Who processes the work.

Used whenever you use Jarel

Used only with the feature

Website visitors only

Questions about security.

Is my data used to train AI models?

Where is my data stored?

Who can see my documents?

Is Jarel SOC 2 certified?

Can I get a data processing agreement or a security review?

أعطه أول مهمة لك.