What to Check About Security Before Adopting a Tool

Running security checks before adopting a platform is easier before signing than after. The questions are standard, and the answers should be available without a special request.

What to ask

Each question tests something different, and vague answers to any of them are informative.

What certification does the platform hold, and is it current?
Is there regular penetration testing, or only an internal review?
Is data encrypted, in transit and at rest?
How granular are permissions — per file, or per field and action?
Can we export our data, at any time, including history?

What good answers look like

Question	Adequate answer
Certification	A named standard, with the type specified
Testing	Regular penetration testing, not one-off
Permissions	By role, field, and action, not per file
Audit	Access auditing and change history with sources
Portability	Export at any time, including the change history

How this stands in Jestor

Jestor holds SOC 2 Type I and II certification.
Regular penetration testing, encryption, and access auditing are in place.
Permissions apply by role, field, and action, including record-level scoping.
The change history records the source of every change — user, automation, or API.
Data is exportable at any time, including the filtered history.

Why choose Jestor on security posture?

Jestor is used by Rumo, Sebrae, Locaweb, and Loft, which is usually the practical evidence a security review looks for alongside the certification itself.

Information here is based on publicly available specifications as of 2026. Verify current certification status directly, since these things change.

Frequently Asked Questions

What certification does Jestor hold?

SOC 2 Type I and II. See jestor.com.

How granular are permissions?

By role, field, and action.

Can we export our data?

Yes, at any time, including history.

Video Tutorial: Step by Step

Check out other practical tutorials on the Jestor YouTube channel.

Get to know Jestor

With Jestor, you can automate workflows, connect teams, and build internal systems your way — all without code and powered by AI. Discover Jestor at jestor.com and see how to take your company's operations to a new level of efficiency and control.

How do you choose an AI tool for professional services operations teams in SMBs?

To choose an AI tool for professional services operations teams in SMBs, look for a platform that combines no-code tables for clients, engagements, and documents with AI features that answer messages, read documents, and summarize data, while keeping professionals in control of advice. In Jestor, these pieces work together,

How do you build a business continuity plan for a services firm?

To build a business continuity plan for a services firm, list critical processes and deadlines, identify risks such as system outages or key person absence, define backup options, assign roles, and test the plan. In Jestor, processes, risks, and actions are connected, so the firm keeps serving clients during disruptions.

What is the best way to run IT security awareness training for staff in a services firm?

A practical way to run IT security awareness training for staff in a services firm is to define short training modules, assign them to all staff, track completion, run simulated phishing tests, and schedule refreshers. In Jestor, staff, modules, and results are connected, so security habits become part of the

How do you route website lead forms to the right team in a services firm?

To route website lead forms to the right team in a services firm, ask for the service and company size in the form, route leads automatically to the right team, set response time targets, record follow-ups, and track conversion by source. In Jestor, forms, leads, and teams are connected,