Security

For the MostSensitive Work

Enjamb keeps your scientific data safe with enterprise security and privacy controls.

Enterprise-Grade Protection

Purpose-Built Security

Security is built across Enjamb’s infrastructure, product, and operations, protecting sensitive work from request to action. That means 24/7 monitoring alongside enterprise-grade controls, including SAML SSO, audit logs, IP allow-listing, and data lifecycle management.

Data Sovereignty and Control

Your organization decides what Enjamb can reach, how information is retained, and when it is removed. Set retention policies per workspace, delete at any time, and keep regulated records inside the systems that already hold them.

No Model Training

Enjamb guarantees through our agreement that your data stays yours. We don’t use inputs, outputs, or uploaded files to train any models, and neither do the model providers we run on.

Identity-Bound Access

The agent acts as the person who made the request, within the permissions that person already has. It cannot open a study, a document, or a dataset its requester could not open themselves, so access never widens just because the work was delegated.

Enforceable Controls

Access and execution boundaries are enforced beneath the model instead of left to a prompt or policy. A system instruction can be argued with; a permission check cannot, which is what keeps behaviour predictable under an auditor’s questions.

Attributable Activity

Every run connects a named requester, their instruction, the systems involved, and the actions produced. The trail is written as the work happens rather than reconstructed afterwards, so a reviewer can follow any result back to its source.

Compliant with the most rigorous security and safety standards.

Explore Security Portal

Enjamb meets the highest industry standards for security and compliance. We include all the default controls enterprise teams expect: SAML SSO, SCIM provisioning, audit logs, IP allow-listing, data residency and lifecycle management, and more.

SOC 2 Type II

Independently audited controls for security, availability and confidentiality.

ISO 27001

Certified information security management across the platform.

HIPAA

Protected health information handled under HIPAA-compliant processes and controls.

Per-user attribution

The agent holds no credentials of its own. It acts as whoever asked, with their permissions, enforced below the model.

No model training

Your data is never used to train or fine-tune any model, by us or by any provider.

Certifications in progress.

Security is Fundamental to Everything We Do

We protect data at every level, from user identity and source permissions to the systems Enjamb reaches and the actions it takes.

Explore Security Controls

Customer data is the information your organization provides, connects, or generates through its use of Enjamb. It remains under your organization’s control.

Enjamb combines identity-bound access, source-system permissions, scoped execution, and attributable activity so protection does not depend on the model remembering a rule.

Only the systems, sources, and workflows your organization connects and approves. Access can be limited to the work Enjamb needs to perform.

Enjamb acts through the identity of the person making the request. Existing system permissions continue to determine what that person, and therefore the agent, can see and do.

Customer data is not used by Enjamb or its model providers to train or fine-tune models.

Yes. Retention and deletion follow controls established with your organization and can be aligned to the connected workflow.

Each run is connected to the named requester, their instruction, the systems involved, and the actions produced. The agent does not operate behind a shared identity.