Juni

Juni hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Security isn't a single yes/no, but Juni is SOC 2 compliant and holds ISO 27001, PCI DSS, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Juni hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@juni.co or via a /security page (Juni lists a security contact).

Juni's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Juni's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Juni's trust center is at https://trust.juni.co. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Juni, as an e-money institution (EMI), protects your money through “safeguarding”, which differs from how your money is protected by a bank. Juni is not a bank but an e-money institution, authorised from Swedish regulator Finansinspektionen. ### How is your e-money protected at Juni? “Safeguarding” is a set of laws that defines how an e-money institution must protect your money. These rules are designed to ensure that if the e-money institution fails, your money will have been kept in a safe place and be paid back to you. For safeguarding to protect you, the e-money institution must follow these rules. That’s why you should only use an e-money institution that you trust. To explain in more detail: once an e-money institution receives your money, it must either place it in a dedicated "safeguarding account" with a bank, or invest it in low risk assets that have been approved by the regulator as an alternative to cash. Sometimes, less commonly, it may protect the money with an insurance policy instead. Your money must stay in these accounts or investments until you spend it. The protection this provides means that if an e-money institution fails, there should be a pot of money (the safeguarding account) sufficient to pay all customers the money they are owed. These safeguarding accounts are protected by law from other creditors of a failed e-money institution making a claim against them. The only thing that can be paid from these safeguarding accounts, before the customers are paid back their e-money, is the cost of the receiver (the person who’s appointed to manage the closure of a failed company). ### How is safeguarding different from the FSCS or DGS protection given by banks? When you keep money with an e-money institution, it's safeguarded instead of having FSCS or DGS protection (sometimes called “deposit insurance”). The main difference between FSCS/DGS protection and safeguarding is that FSCS/DGS protection is covered by an independent statutory organisation…

Learn more about our Vulnerability Disclosure Policy