Identity and access
Roles, administrative accounts, separation of responsibilities and least privilege.
JNL Trust Center
Security and accountability without marketing shortcuts.
We explain how we approach deployment, access, data, backups and product evolution. The exact security scope is always matched to the product and customer environment.
Security by designOn-premiseRBACAudit trailBackup & recoveryPrivacy by design
DeploymentOn-premise or another model agreed for the specific system.
AccessRoles, least privilege and administrative control where supported by the product.
EvidenceHistory, logs and auditability designed around the process.
TransparencyWe do not claim certifications or compliance that a product does not formally hold.
Security architecture
Five areas we discuss before deployment
Not every product needs identical controls. Security must match the data, users, process criticality and the organisation’s infrastructure.
Logs and history
Event records and operation history where process accountability requires them.
Data and privacy
Data minimisation, retention and party roles are defined before the system goes live.
Backup and recovery
Backups, recovery planning and tests are matched to the deployment model.
On-premise as a first-class enterprise model
For hospitals, public bodies and organisations that require infrastructure control, solutions can be designed to operate in the customer’s own environment.
- local environment and data control
- reverse proxy, TLS and segmentation according to design
- controlled administrative access
- backup and update procedure
- integrations assessed individually
Security after go-live
Responsibility does not end at deployment. Version evolution, fixes and configuration changes should be controlled.
- versioning and change logs
- pre-release testing
- controlled updates
- product incident and issue handling
- configuration review for major changes
Trust package
Material we can prepare for procurement or security review
Documentation depends on product and deployment. Instead of a fictional security badge, we prepare the information IT, DPO or procurement actually needs.
Architecture overview
Components, flows and dependencies for the specific deployment.
Security checklist
Users, roles, access, backup, updates and responsibility points.
Privacy scope
Data scope, party roles, retention and areas that may require DPA or DPIA work.
Trust Center is not an automatic compliance statement.
NIS2, GDPR, WCAG and sector requirements cover the entire organisation, its processes and infrastructure. JNL products can support selected controls and processes, but compliance depends on the full deployment context.