A control layer must be the most trusted part of your stack.
JanusTB sits between your data and AI providers, so we hold ourselves to a high bar. Here is what is in place today, and what comes next.
Fail-closed, by design
If JanusTB cannot be reached, the request is blocked. Your data never takes an unchecked path.
✓ Checked → sent✕ Blocked → nothing sent
Illustrative demoIn place today
Tenant isolation
Each organisation’s data, documents and keys are isolated, and cross-tenant access is tested.
Encryption
Provider keys are encrypted with AES-256-GCM. Document storage is encrypted and versioned.
Single sign-on
Google Workspace and Microsoft Entra ID through OpenID Connect, with optional enforced SSO and a break-glass admin.
Scoped API keys
An extension key cannot read audit data, and a SIEM key cannot send requests.
Audit trail
Every decision is recorded with the policy applied. Audit exports never include prompt text or secrets.
Hosting in France
Production runs on OVHcloud in France, with daily database backups, external monitoring and outage alerts.
Abuse protection
Rate limits per organisation and per IP on sensitive and costly routes.
Session security
Tokens are revoked on logout and on password change.
Subprocessors
Summary of the third parties involved in running the JanusTB application. The contractual list is in our data processing agreement.
| Provider | Purpose | Location |
|---|---|---|
| OVHcloud (OVH SAS) | Application hosting, database and document storage | France |
| Resend | Transactional emails (password reset, alerts) | United States |
| Cloudflare | DNS and website hosting | Global network |
| AI providers you choose (OpenAI, Anthropic, Mistral AI, Azure OpenAI) | Model processing, with your organisation’s own keys | Depends on the provider and region you choose |
Certifications and documents
- Data processing agreement (GDPR)Available
- Hosting in FranceIn place
- External penetration testPlanned
- ISO 27001Planned
Need answers to a security questionnaire or our policies? Ask through the contact form.
Contact us →Responsible disclosure
If you believe you have found a vulnerability in JanusTB, write to contact@janustb.com with a description and the steps to reproduce it.
Please do not access data that is not yours, do not degrade the service, and give us reasonable time to fix the issue before any public disclosure. We acknowledge every report and keep you informed.
Next 12 months
- 01High availability
- 02Multi-factor authentication
- 03External penetration test
- 04ISO 27001 certification
- 05Tamper-evident audit log
Legal documents
Report a security issue
Write to contact@janustb.com. We reply to every report.
Take control of your AI stack.
We are working with a small group of European companies as design partners: three months free and direct access to the founders.