Your data is handled securely, end to end
Sajva is built with security as a baseline requirement, not an afterthought. Here's how we protect your information.
Encryption
All data is encrypted both in transit and at rest.
Access control
You decide who in your organization can view, edit and approve.
Traceability
Every answer and source is logged – full history for audit and follow-up.
Secure hosting
Data is stored with established cloud providers with high uptime guarantees.
Data ownership
Your data is always your own. We never sell or share it with third parties.
GDPR and DPA
Processing under GDPR. A data processing agreement (DPA) is available on request.
Reporting a vulnerability
If you believe you have found a security flaw in Sajva, email info@sajva.ai with SECURITY in the subject. Include what you need to make it reproducible: the request, the account it was made from, and what came back that should not have. If you believe you reached another customer's data, say so in the subject — that changes who we wake up.
- We acknowledge within 3 working days, and tell you within 10 whether we could reproduce it.
- We keep you informed until it is fixed, and if we disagree that something is a vulnerability we say why rather than going quiet.
- Please give us 90 days before publishing, or less if we have shipped a fix and agreed a date with you.
- Test against your own account only. If you can reach another customer's data, stop there and tell us what you could reach rather than proving how much.
We will not pursue anyone who follows this policy in good faith.