Data Processing Addendum

This Data Processing Addendum (“DPA”) describes how Jishu Labs LLC processes personal data on behalf of customers who use Jumbi. If you need a signed DPA for a procurement process, contact us and we will complete the appropriate agreement.

For account data, submitted code and assessment results handled through Jumbi, the customer is generally the controller or business, and Jishu Labs LLC acts as processor or service provider as instructed by the customer through use of the Service.

• Subject matter: Providing readiness assessments of submitted code and the related product features.
• Duration: For the life of the customer account unless deleted earlier.
• Data categories: Account details, submitted code, assessment results, settings and contact messages.
• Data subjects: Customer users.
• Purpose: Operating, securing, supporting and improving the Service.

Jishu Labs LLC maintains technical and organizational measures designed to protect customer data, including encryption at rest, encrypted transport over TLS, account-scoped data access through Supabase row level security, least-privilege access, separation of environment keys and validation at public API boundaries. More detail is in the Security Overview.

Jishu Labs LLC uses sub-processors to host the Service, authenticate users, store data and deliver contact-form email. The current list, with each provider's purpose and region, is on the Sub-processors page.

Submitted code and assessment results are used only to provide the Service to the customer. They are not used to train any AI model and are not sold or licensed to third parties. Assessments are scored by Jumbi's own rules, without sending customer code to an AI provider.

We will provide reasonable assistance with data subject requests, security inquiries, deletion requests and regulatory questions where the information is available to us and relates to the customer's use of Jumbi.

Customers can export their assessments as JSON from the application. On a verified deletion request or account closure, Jishu Labs LLC will delete or anonymize customer data in line with the Privacy Policy and operational backup retention.

For DPA requests or privacy procurement questions, use the contact page or email admin@jishulabs.com.