Privacy Policy

Last updated: June 2026

Data We Collect

When you use JIT Guard, we collect:

  • Account information — AWS account IDs, account names, organisation structure (via EventBridge org sync).
  • Identity information — Slack user IDs, email addresses, IAM Identity Center user identifiers.
  • Usage data — Elevation requests, approvals, durations, reasons, and timestamps. This is retained as an immutable audit trail.
  • Configuration data — Slack workspace tokens, PagerDuty API tokens, SAML IdP metadata.

How We Use Data

  • To grant and revoke AWS access based on your team's requests and policies
  • To maintain an audit trail of all access events
  • To sync your AWS organisation structure for account auto-complete
  • To send Slack notifications about elevation status changes

Data Retention

Audit records are retained per your plan's retention policy (30 days for Starter, 90 days for Growth, custom for Enterprise). After the retention period, records are automatically deleted via DynamoDB TTL. Configuration data is retained for the duration of your subscription and deleted within 30 days of cancellation.

Data Sharing

We do not sell your data. We do not share your data with third parties except as required to operate the service (e.g., Slack APIs, AWS APIs, Stripe for billing).

Security

All data is encrypted at rest (DynamoDB SSE) and in transit (TLS). Access to customer data is scoped per-tenant via IAM session policies. We do not have access to your AWS console, IAM users, or resources beyond what is necessary to manage Identity Center groups and assignments.

Contact

Email support@jitguard.com for privacy-related inquiries.