Enterprise-grade security, compliance, and privacy — built in from day one.
AES-256 encryption at rest. TLS 1.3 in transit. All sensitive fields encrypted at the application layer.
Hosted on AWS with multi-region failover. 99.99% uptime SLA. Automated backups with point-in-time recovery.
Role-based access control (RBAC). MFA required for all admin accounts. Session management with automatic timeout.
Every action logged immutably. Tamper-proof event store. Full compliance audit trails available on demand.
Independent audit of security, availability, and confidentiality controls.
Payment Card Industry Data Security Standard compliance.
Approved to file on behalf of employers with the Canada Revenue Agency.
Registered with FINTRAC for anti-money laundering compliance.
Our principles
Your pay lands in your own accounts. For personal funds Jmoor is non-custodial — it moves money on your instruction and can never lock you out.
We don’t sell your data or share it for marketing. It’s tenant-isolated, you own it, and you can export it whenever you want.
See the breakdown behind your Trust Score, the entries in your ledger, and the reconciliation behind every balance. No black boxes.
Money movements post to a double-entry ledger and reconcile daily against the payment partners — so the numbers you see are the numbers that cleared.
We do not sell your data. We do not share your information with third parties for marketing. We are a technology service provider — you retain ownership of all your data.