Is this your company? Buyers are checking Juni here. Claim juni.co free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Juni
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Juni is SOC 2 compliant. Juni also holds ISO 27001, PCI DSS, and GDPR.
About
Juni is the financial platform that gives businesses in digital commerce the tools and intelligence they need to manage and ease cash flow and make smarter decisions much faster. Learn more about our [Vulnerability Disclosure Policy](https://help.juni.co/en/articles/119420-vulnerability-disclosure-policy)
Compliance & infrastructure
Compliance leadership
The person who leads Juni's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Juni's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
4/11 details · 36%SOC2C shows the verified essentials. 7 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Juni SOC 2 compliant?
Juni is SOC 2 compliant. On SOC2C this listing is Listed.
Is Juni ISO 27001 certified?
According to Juni's public trust center, Juni is ISO 27001 certified. On SOC2C this listing is Listed.
Is Juni PCI DSS compliant?
According to Juni's public trust center, Juni is PCI DSS compliant. On SOC2C this listing is Listed.
Is Juni GDPR compliant?
According to Juni's public trust center, Juni is GDPR compliant. On SOC2C this listing is Listed.
Can I use Juni's SOC 2 for a vendor risk assessment?
Yes. Juni's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Juni penetration tested?
Juni hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Juni secure?
Security isn't a single yes/no, but Juni is SOC 2 compliant and holds ISO 27001, PCI DSS, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Juni have a bug bounty or vulnerability disclosure program?
Juni hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@juni.co or via a /security page (Juni lists a security contact).
Who are Juni's subprocessors?
Juni's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Juni host or store data?
Juni's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Juni's trust center or security page?
Juni's trust center is at https://trust.juni.co. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Juni
Reproduced from Juni's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
How does Juni protect your funds?
Juni, as an e-money institution (EMI), protects your money through “safeguarding”, which differs from how your money is protected by a bank. Juni is not a bank but an e-money institution, authorised from Swedish regulator Finansinspektionen. ### How is your e-money protected at Juni? “Safeguarding” is a set of laws that defines how an e-money institution must protect your money. These rules are designed to ensure that if the e-money institution fails, your money will have been kept in a safe place and be paid back to you. For safeguarding to protect you, the e-money institution must follow these rules. That’s why you should only use an e-money institution that you trust. To explain in more detail: once an e-money institution receives your money, it must either place it in a dedicated "safeguarding account" with a bank, or invest it in low risk assets that have been approved by the regulator as an alternative to cash. Sometimes, less commonly, it may protect the money with an insurance policy instead. Your money must stay in these accounts or investments until you spend it. The protection this provides means that if an e-money institution fails, there should be a pot of money (the safeguarding account) sufficient to pay all customers the money they are owed. These safeguarding accounts are protected by law from other creditors of a failed e-money institution making a claim against them. The only thing that can be paid from these safeguarding accounts, before the customers are paid back their e-money, is the cost of the receiver (the person who’s appointed to manage the closure of a failed company). ### How is safeguarding different from the FSCS or DGS protection given by banks? When you keep money with an e-money institution, it's safeguarded instead of having FSCS or DGS protection (sometimes called “deposit insurance”). The main difference between FSCS/DGS protection and safeguarding is that FSCS/DGS protection is covered by an independent statutory organisation…
Where I can find the Vulnerability Disclosure Policy?
Learn more about our Vulnerability Disclosure Policy
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public