Security and data handling

Jurno reconciles accounting data. It does not need, and does not keep, anything about your employees as people.

What we keep

• Journal-level lines: date, account, debit, credit, journal number, class or department - from the payroll journal, the ledger and, if you add them, the bank export and last period's payroll journal.
• The company name you type, if any.
• Memo text with every word that is not standard payroll or accounting vocabulary replaced by *, so names typed into memos do not survive.
• Class/department and pay-run values, with any word that is not common business vocabulary replaced by a code such as ~3fa2 (you can list words to keep readable in the client mapping).
• The exception report built from those lines, and a draft mapping of your accounts.

What we never keep

• Employee names, IDs, SSNs or national insurance numbers, dates of birth, addresses, emails, phone numbers, bank details.
• Salaries, pay rates or hours.
• Your uploaded files. They are read in memory and discarded.

How personal columns are removed

1. In your browser, before upload. When you pick a CSV or Excel file, the page reads it on your computer, removes any column that looks person-level, masks names in memo and description columns, and shows you exactly what will be sent. A memo column under an unusual heading is masked on the server instead.
2. Again on the server. The same rules run again on arrival; the names of removed columns (never their contents) are written to the server log and listed in your report.
3. Aggregation. Payroll rows are summed per account and pay date, so no single person's amounts are kept.

Excel files are read in your browser too (the first sheet), with no extra software. Very old browsers that cannot do this send the Excel file instead; then steps 2 and 3 still remove personal data before anything is stored.

Where and how long

• Hosted on Google Cloud in the United States (us-central1, Iowa).
• Reports are deleted automatically 30 days after they are created.
• Delete immediately: use "Delete this report now" on the report, or reply to the sender of your report with its job ID. You get a deletion receipt listing what was removed.
• Report links work without a password: anyone with the link can open or delete the report, so share it only with people who should. The link contains a long random code that cannot be guessed.
• No analytics, advertising or tracking scripts. Jurno's own logs and page counts contain no IP addresses. The hosting platform (Google Cloud) records the IP address of each request in its own request logs, kept for 30 days for security and abuse prevention.

Connected systems (automatic service)

• You connect payroll and accounting through the providers' own sign-in. Jurno stores the resulting keys encrypted and only reads data: pay-run totals from payroll, ledger lines and the chart of accounts from accounting.
• Jurno never requests individual employees' pay from your payroll system.
• Alerts go only to the channels you add in your portal, use fixed wording, and contain totals and exception titles - no employee data.
• Disconnect any time in your portal, and also remove Jurno in the provider's connected-apps settings.

What the report is

The report is prepared for your review. It is not an audit and not tax advice. Every number in it cites the file and row it came from, so you can check it yourself.

Data processing agreement

A one-page data processing agreement is available on request before you send any client file.