Keeping your communities safe, secure, and compliant

At Jovo, trust is the foundation of everything we build. Whether you’re leading a team, managing safeguarding responsibilities, or overseeing data compliance, we understand that security isn’t optional – it’s essential.

This page explains how we protect your data, support organisational oversight, and uphold the privacy and safety of every user.

How Jovo protects your data

We follow industry-standard security practices across every layer of our platform. That includes:

• Encryption in transit and at rest: All data is encrypted using modern, tested protocols – whether it’s being sent or stored.
• Email verification for account access: Every user must validate their email before joining a Jovo community, ensuring accountability from the start.
• Invite-only communities: Communities on Jovo are not discoverable unless you’re invited. Your organisation controls who’s in the room.
• Granular admin permissions: Administrators are only granted the access they need – nothing more. This follows the principle of least privilege and reduces risk.
• Continuous monitoring: Our infrastructure is monitored for suspicious activity and performance issues, with alerts triggered when thresholds are breached.
• London-based data hosting: All Jovo data is stored in secure data centres located in London. This supports UK data sovereignty requirements and reflects our high standards for privacy, compliance, and control.

Built for compliance and control

Jovo is designed for organisations where safety, governance, and accountability matter.

• Safeguarding comes first: Designated safeguarding administrators can access content to investigate and act on safeguarding concerns. This is critical for environments where user protection is a legal or ethical obligation.
• Administrator oversight: Because Jovo is used within organisations, selected admins can review messages where appropriate. This ensures responsible use and compliance with internal policies.
• Compliant by design: Jovo supports your compliance with UK GDPR. Data is handled in accordance with privacy regulations, and we don’t collect more than necessary.
• Audit-friendly architecture: Communication histories, access controls, and community activity can be reviewed to support compliance checks and internal investigations.
  

We do not use end-to-end encryption – and that’s deliberate. Organisational safeguarding requires visibility. Jovo is for teams, not secrets.

Privacy matters

We believe users should have clarity over what’s visible, to whom, and why.

• Anonymity in public communities: Users can choose to remain anonymous in public communities if permitted by the organisation.
• No hidden tracking: We do not use Jovo to harvest user data or behaviour for advertising purposes.
• You’re always in control: Jovo only asks for data when needed to support access, moderation, or safety. No more, no less.

Why Jovo doesn’t use end-to-end encryption

End-to-end encryption is designed for private conversations, where no one – not even the platform provider – can read your messages.

Jovo is different. It’s built for organisational communication, where accountability, safeguarding, and moderation are essential. Here’s why:

• Safeguarding requires visibility: End-to-end encryption would block safeguarding administrators from investigating harm, harassment, or misconduct.
• Some communities are public: Jovo lets organisations create public spaces where new members can view past discussions. That’s not compatible with end-to-end encryption.
• Organisational control is key: Communications belong to the organisation – not the individual. This ensures admins can uphold standards, respond to risks, and support teams effectively.
  

If you’re concerned about government surveillance or admin access, Jovo may not be the right tool for those use cases. But for compliant, accountable, and user-safe organisational messaging, it’s the right choice.

A shared space, not a personal chat app

When you use Jovo, you’re participating in a space owned and managed by your organisation. That means:

• Administrators may access data if required by policy.
• Posts in public communities may be visible to new members.
• Messages and files shared on Jovo should always align with your organisation’s values and expectations.

Trusted by organisations that value safety

Jovo supports schools, charities, workplaces, and community groups where trust and responsibility are core. Our platform is used by safeguarding officers, IT teams, HR managers, and leaders who need visibility without compromising user privacy.

Ongoing security practices

We don’t treat security as a one-off. We:

• Monitor our systems 24/7
• Apply security patches and updates regularly
• Conduct internal reviews of access controls
• Review safeguarding workflows with real users

Would You Like to Learn More?

We welcome transparency. If you have questions about our security posture, data handling, or organisational controls, please get in touch