Jig: security and data handling, one page

For the person at an agency who has to sign this off. Version 1.0, 31 October 2026. Longer answers are in the Data Processing Agreement; a completed security questionnaire is available on request to hello@usejig.co.uk.

What Jig does. Your consultants email a candidate's CV to the service. It comes back in your template, as Word and PDF, in the same email thread. That is the whole data flow: email in, email out.

Where the data goes. The service runs in Amazon Web Services' London region. The reading and structuring of the CV uses a language model run inside AWS's EU regions through Amazon Bedrock; prompts and outputs are not stored there and are not shared with the model's developer. The mailbox is Google Workspace with its data region set to Europe. Nothing leaves the UK and EU.

How long we keep it. The CV, anything derived from it and the documents we send back are deleted automatically within 7 days of delivery. The mailbox copies are deleted on the same schedule. What remains is a log line: date, your consultant's address, a file fingerprint, and whether it succeeded. No candidate name, no content.

Who can see it. No one, in normal operation. The system does the work. One person operates Jig; if a job fails in a way the system cannot fix, that person may open it to resolve it, the access is logged, and the same 7-day deletion applies. Your consultant is told when a job has gone to a person, because the reply says so.

Who can send. Only addresses on your agency's own email domain. Personal email providers are refused. Your template can be changed only by the onboarding contacts you name.

Security controls. Encryption in transit (TLS) and at rest (AWS and Google managed keys). Multi-factor authentication on every administrative account. Least-privilege roles: the service can call the model and read its own storage and nothing else. No inbound network access to the service at all; it polls the mailbox. All code changes are tested automatically and deployed automatically; nothing is edited by hand in production. Logs contain metadata only. Administrative devices are full-disk encrypted.

Training and reuse. Your candidates' data is not used to train or improve any model, by us or by any sub-processor. It is not combined with any other customer's data. We never contact candidates.

If something goes wrong. You are told within 48 hours of us becoming aware of a breach affecting your data, with what we know and what we are doing. The procedure is written down and rehearsed.

Paperwork. Data Processing Agreement with Article 28 terms, part of the standard terms: usejig.co.uk/dpa. Sub-processor list with 30-day change notice: usejig.co.uk/sub-processors. Privacy notice: usejig.co.uk/privacy. ICO registration number to follow. Refract Technologies Ltd, company number 16914050.

Questions. hello@usejig.co.uk. Security questionnaires returned within 10 working days.