Protecting User Data

Jury Simulator Security Policy

We are committed to ensuring the confidentiality, integrity, and availability of all client data and proprietary information. Our cloud security policy is designed to protect our cloud-based platform, data, and users from cybersecurity threats while maintaining compliance with industry standards, including SOC 2 and AWS best practices.

This security policy applies to all Jury Simulator cloud systems, employees, contractors, and third-party vendors with access to the Jury Simulator platform or data.

1. Data Security Data Encryption

JurySimulator protects client data with end-to-end encryption, strict access controls, and reliable backups. Data in transit is encrypted using TLS 1.2+ and at rest with AES-256. Access is limited to authorized personnel, with MFA required for all employees and contractors. Data is regularly backed up to AWS S3 with versioning, and disaster recovery is tested quarterly.

All data in transit is encrypted using TLS 1.2 or higher.
All data at rest in the cloud is encrypted using AES-256 encryption.
Access to client data is restricted to authorized personnel based on the principle of least privilege.
Multi-factor authentication (MFA) is required for all employees and contractors accessing cloud systems.
Data is regularly backed up to AWS S3 with versioning enabled.
Disaster recovery plans are tested quarterly to ensure cloud resilience.

2. AWS Cloud Infrastructure & Physical Security

Jury Simulator is fully hosted on Amazon Web Services (AWS), leveraging their secure cloud infrastructure. Our cloud environment aligns with AWS security best practices:

AWS Identity and Access Management (IAM) is used to control and monitor cloud access.
AWS Security Hub and GuardDuty are enabled for cloud threat detection and monitoring.
AWS CloudTrail is enabled for cloud audit logging and compliance tracking.
AWS Config is used to monitor cloud resource configurations and ensure compliance.
AWS data centers maintain robust physical security controls, including biometric access, 24/7 surveillance, and perimeter defense systems.

3. SOC 2 Compliance

Jury Simulator adheres to SOC 2 Type II standards for Security, Availability, and Confidentiality. Our compliance efforts include:

Annual SOC 2 audits conducted by an independent third-party auditor.
Risk assessments performed quarterly to identify and address potential cloud threats.
Security awareness training provided to all employees upon onboarding and annually thereafter.
Incident response plan in place, with regular tabletop exercises to ensure cloud preparedness.

4. Application Security

Secure development with peer reviews, SAST/DAST testing, annual penetration tests, 24-hour critical patching, and monthly vulnerability scans.

All cloud application code is peer-reviewed and scanned for vulnerabilities prior to deployment.
Static and dynamic application security testing (SAST/DAST) is conducted regularly.
External penetration tests are conducted annually by a certified cybersecurity firm.
Critical vulnerabilities are patched within 24 hours of discovery.
Monthly vulnerability scans are conducted using industry-standard tools.

5. Incident Response

24/7 Security Incident Response Team (SIRT) handles threats based on severity, with all incidents logged, investigated, and reviewed.

6. Vendor Management

Vendors undergo security assessments, sign Data Processing Agreements (DPAs), and must comply with SOC 2 or equivalent standards.

7. User Data Privacy

Minimal data collection, PII anonymized when possible, and data retention policies aligned with legal and client requirements.

8. Continuous Improvement

Security policies are reviewed annually, with audit feedback and assessments driving ongoing enhancements.

Jury Simulator is dedicated to maintaining the highest standards of cloud cybersecurity and data protection. Our reliance on AWS cloud infrastructure and SOC 2 compliance framework ensures that our clients’ data is safeguarded with industry-leading cloud security practices.