> ## Content Index
> Fetch the complete content index at: https://blog.jestor.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# What to Check About Security Before Adopting a Tool
- URL: https://blog.jestor.com/security-checks-before-adopting-a-tool/
- Published: 2026-09-17T22:36:35.000Z
- Updated: 2026-09-17T22:36:35.000Z
- Author: Bruno Bannach

Running **security checks before adopting a platform** is easier before signing than after. The questions are standard, and the answers should be available without a special request.

## What to ask

Each question tests something different, and vague answers to any of them are informative.

- **What certification does the platform hold**, and is it current?
- **Is there regular penetration testing**, or only an internal review?
- **Is data encrypted**, in transit and at rest?
- **How granular are permissions** — per file, or per field and action?
- **Can we export our data**, at any time, including history?

## What good answers look like

| Question          | Adequate answer                                  |
| ----------------- | ------------------------------------------------ |
| **Certification** | A named standard, with the type specified        |
| **Testing**       | Regular penetration testing, not one-off         |
| **Permissions**   | By role, field, and action, not per file         |
| **Audit**         | Access auditing and change history with sources  |
| **Portability**   | Export at any time, including the change history |

## How this stands in Jestor

1. **Jestor** holds SOC 2 Type I and II certification.
2. Regular penetration testing, encryption, and access auditing are in place.
3. Permissions apply by role, field, and action, including record-level scoping.
4. The change history records the source of every change — user, automation, or **API**.
5. Data is exportable at any time, including the filtered history.

## Why choose Jestor on security posture?

**Jestor** is used by Rumo, Sebrae, Locaweb, and Loft, which is usually the practical evidence a security review looks for alongside the certification itself.

Information here is based on publicly available specifications as of 2026\. Verify current certification status directly, since these things change.

## Frequently Asked Questions

### What certification does Jestor hold?

SOC 2 Type I and II. See [jestor.com](https://jestor.com/?ref=blog.jestor.com).

### How granular are permissions?

By role, field, and action.

### Can we export our data?

Yes, at any time, including history.

## Video Tutorial: Step by Step

Check out other practical tutorials on the Jestor YouTube channel.

## Get to know Jestor

With **Jestor**, you can automate workflows, connect teams, and build internal systems your way — all without code and powered by **AI**. Discover Jestor at [jestor.com](https://jestor.com/?ref=blog.jestor.com) and see how to take your company's operations to a new level of efficiency and control.