SOC2C

Is this your company? Buyers are checking Jylo Book here. Claim jylo.ai free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free
Jylo Book logo

Jylo Book

Trust level
Listed
Unverified

Sourced from public information. Not yet verified by the company.

Jylo Book is SOC 2 Type II compliant. Jylo Book also holds ISO 27001, and GDPR.

Framework
Auditor
Last report
Renewal
View official trust center ↗

About

Jylo helps organisations bridge the gap between individual brilliance and organisational performance with AI driven playbooks that standardise expertise in a secure, collaborative platform. [Productise Intelligence](https://www.youtube.com/watch?v=eJoGVhU-nE4) [Book Demo](https://jylo.ai/book-demo)

Compliance & infrastructure

Hosting
AWSAzure

Subprocessors

3
  • A
    Auth0 · Identity provider
    In Region
  • M
    Microsoft Azure · Cloud provider
    In Region
  • A
    Amazon Web Services · Cloud provider
    In Region

Compliance leadership

The person who leads Jylo Book's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. Jylo Book's penetration test vendor isn't listed yet.

Claim this profile to add it.

This listing is partial

6/11 details · 55%

SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

  • Auditorraises trust
    Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
  • Report dateraises trust
    Add your most recent report period so buyers see how current your SOC 2 is.
  • Renewal date
    Add your renewal window so buyers know your coverage is active.
  • Documents
    List the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
  • Security controls
    Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is Jylo Book SOC 2 compliant?
Jylo Book is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Jylo Book ISO 27001 certified?
According to Jylo Book's public trust center, Jylo Book is ISO 27001 certified. On SOC2C this listing is Listed.
Is Jylo Book GDPR compliant?
According to Jylo Book's public trust center, Jylo Book is GDPR compliant. On SOC2C this listing is Listed.
Is Jylo Book SOC 2 Type I or Type II?
Jylo Book is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Jylo Book's SOC 2 for a vendor risk assessment?
Yes. Jylo Book's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Answers published by Jylo Book

Reproduced from Jylo Book's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

Does Jylo use Customer Data to train AI Models?
No, Jylo will never use Customer Data for any purpose. Our Master Framework Agreement includes a specific term to ensure that customers have contractual certainty that Jylo will never have any rights to Customer Data, even beyond the duration of the agreement. The term states: The Customer shall: (i) own all rights, title and interest in and to all Customer Data in perpetuity; and (ii) have sole responsibility for the legality, reliability, integrity, accuracy, and quality of all Input Data; and (iii) retain assurance that Jylo will never use Customer Data for any purpose, including but not limited to training AI models through methods such as fine-tuning or Retrieval-Augmented Generation (RAG)." To eliminate any ambiguity, we explicitly specify how Customer Data cannot be used. Unlike other AI vendors who may have ambiguous terms, we ensure there is no "grey area." Some vendors have a "No AI Training" clause but still retain rights to use Customer Data to "provide and improve the services,". In our view, this could allow for improving AI through RAG. Our goal is to provide absolute certainty that Customer Data is not, and will never be, part of our business plan. We are open to amending our clause to provide further clarify or address any additional customer concerns.
Has Jylo opted out of Azure AI abuse monitoring?
Yes, a primary market for Jylo is the legal industry. In this industry, it is crucial to maintain legal privilege. Allowing any human-in-the-loop at Microsoft access to Customer Data to check for misuse would violate this privilege. Recognizing that the legal field is our core market, Microsoft has agreed to exclude our data processing from their misuse monitoring. We have shared evidence of this agreement within this Trust Center.
Does Jylo let you search the internet?
No, we don't allow this - not through lack of technical ability, but rather that providing this functionality would put our customers in a position where they would be breaching the Terms of Use for most websites, which have very clear prohibited use clauses that explicitly state web scraping is a civil contract breach. Whilst its true AI models were trained on the internet, the primary purpose of the model use in Jylo is more as a reasoning engine than a fact database. That puts the models more in a place of learning from the internet rather than regurgitating and replacing it. AI search tools that actively scan content, including new, updated content, and summarise or reason on that text without the permission of the website owner is, in our view, an unfair practice that doesn't promote the future of free open and shared publicly available internet.
Where is Jylo hosted?
We partner with Microsoft Azure, which means we can host Jylo anywhere in the world where there are Azure datacenters. Azure global infrastructure experience