AI tools and client data
Is Jump safe for client data?
Short answer: Whether Jump is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Meet (core plan) and on Onboard and Grow add-ons, Jump says it does not train its models on what the client meeting recording contains, by default. Every fact on this page is Jump's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.
See which AI tools your staff usePlan by plan, in Jump’s own words
A meeting assistant built for financial advisers: it joins the client meeting, writes the notes and the follow-ups, and files them against the client record. The recording is of a conversation about somebody's money, which is what an examiner will ask to see.
| What you are asking | Meet (core plan) | Onboard and Grow add-ons |
|---|---|---|
| Trains the vendor's models by default | No, and Jump names the three artefacts rather than saying “your data”: the recording, the transcript and the summary.“Your meeting recordings, transcripts, and summaries are never used for training or fine-tuning.” source, read | No, and Jump names the three artefacts rather than saying “your data”: the recording, the transcript and the summary.“Your meeting recordings, transcripts, and summaries are never used for training or fine-tuning.” source, read |
| How to turn training off | Not found in the pages we read. | Not found in the pages we read. |
| How long data is kept | You set it. Jump publishes no default, so the period in force is whichever one your firm configured — or never configured.“Customers may define custom retention periods, configure role-based access controls…” source, read | You set it. Jump publishes no default, so the period in force is whichever one your firm configured — or never configured.“Customers may define custom retention periods, configure role-based access controls…” source, read |
| What an admin can see or control | Role-based access, plus the recording-disclosure and consent handling an examiner would ask about.“configure role-based access controls, and manage compliance-supporting obligations like recording disclosures and consent.” source, read | Role-based access, plus the recording-disclosure and consent handling an examiner would ask about.“configure role-based access controls, and manage compliance-supporting obligations like recording disclosures and consent.” source, read |
| Single sign-on | Single sign-on and directory provisioning, and Jump lists both among the features included in every plan rather than only the top one.“Jump supports SSO and SCIM provisioning.” source, read | Single sign-on and directory provisioning, and Jump lists both among the features included in every plan rather than only the top one.“Jump supports SSO and SCIM provisioning.” source, read |
| Business Associate Agreement | Not found in the pages we read. | Not found in the pages we read. |
| Where the data is processed | Wherever you choose, backups included. Jump makes the region a customer setting.“We store your data, including backups, in the region you designate.” source, read | Wherever you choose, backups included. Jump makes the region a customer setting.“We store your data, including backups, in the region you designate.” source, read |
An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the Jump pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask Jump before client information goes near it.
What this means for
The duty does not change because the tool is new. What changes is where the client information ends up.
- Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
- Dental and medical practices. We didn't find a BAA statement in the pages listed below; ask Jump before any patient data goes in. See dental practices.
- CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
- Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
- Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.
How to tell which version your staff use
The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.
1. Ask
Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.
2. Look at the billing and the admin console
This finds what the business pays for. It does not find a personal account, which is the one that matters here.
3. Look on the computers
A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.
Settings to check today
From Jump’s own documentation. Each one is a change somebody can make this afternoon.
- Set a retention period. Jump gives you the control and publishes no default, so until somebody sets one there is nothing to tell a client.“Customers may define custom retention periods, configure role-based access controls…” source, read
- Turn on single sign-on even on the entry plan. Jump includes it everywhere, which removes the usual excuse for not having it.“SSO” source, read
- Use the compliance dashboard and the disclosure settings rather than remembering to mention the recording. Jump lists both on every plan.“Compliance dashboard” source, read
- Get the SOC 2 report. Jump says it is downloadable without talking to a salesperson.“Our SOC 2 Type II report, penetration test reports, and all other available documentation are available at Jump’s Trust Center — no sales call required.” source, read
Worth knowing
- Separation between customers is a design claim worth having in writing when a client asks whose data sits next to theirs.“We take a multi-tenant approach with strict logical data separation, so your data never commingles with another customer’s.” source, read
Questions we get asked
Is Jump safe for client data?
Whether Jump is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.
On Meet (core plan) and on Onboard and Grow add-ons, Jump says it does not train its models on what the client meeting recording contains, by default.
Every fact on this page is Jump's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.
Does Jump train its models on what we put into Jump?
On Meet (core plan) and on Onboard and Grow add-ons, Jump says it does not train its models on what the client meeting recording contains, by default.
On Meet (core plan), Onboard and Grow add-ons: No, and Jump names the three artefacts rather than saying “your data”: the recording, the transcript and the summary.
Jump's own words: "Your meeting recordings, transcripts, and summaries are never used for training or fine-tuning." (read 2026-11-03).
How long does Jump keep what we put into Jump?
On Meet (core plan), Onboard and Grow add-ons: You set it. Jump publishes no default, so the period in force is whichever one your firm configured — or never configured. Jump's own words: "Customers may define custom retention periods, configure role-based access controls…" (read 2026-11-03).
Can an administrator read what we put into Jump?
On Meet (core plan), Onboard and Grow add-ons: Role-based access, plus the recording-disclosure and consent handling an examiner would ask about.
Jump's own words: "configure role-based access controls, and manage compliance-supporting obligations like recording disclosures and consent." (read 2026-11-03).
Will Jump sign a Business Associate Agreement for Jump?
We didn't find a BAA statement in the pages listed below; ask Jump before any patient data goes in.
How do we find out which version of Jump our staff are using?
Jump sells this to practices rather than to individuals, so there is no personal account to find.
What decides the answers above is which plan your practice is on and what your own administrator has switched on, both of which are in your subscription and your admin console rather than on anybody's laptop.
Obsidian Ridge's free 30-day AI security assessment covers the tools nobody approved, which is the other half of the picture.
Sources
Jump’s own pages, with the date each was read. Nothing on this page comes from anywhere else.
- jump.ai/security, read
- jump.ai/pricing, read
All 35 tools, side by side, or run the AI tool risk checker over the ones you know about.
Other tools people ask about
Same question, different answers. The ones in the same category are the ones staff swap between.
Is Zocks safe for client data?
Meeting notetaker · Zocks
Is Zoom AI Companion safe for client data?
Meeting notetaker · Zoom
Is Otter.ai safe for client data?
Meeting notetaker · Otter.ai