--- title: "Compliance statements - JobsPipe" description: "Where JobsPipe stores and processes data, how the API is versioned and how long each version is supported, incident notice, accessibility, Global Privacy Control, the software bill of materials, and" canonical: https://jobspipe.dev/trust/compliance --- [Trust Center](https://jobspipe.dev/trust) # Compliance statements The commitments customers and their auditors ask for most, each in one place. The Terms of Service, the Privacy Policy and the Data Processing Addendum are the binding documents. Last updated: October 25, 2026 ## Where data is stored and processed - The API, the MCP server, the website and their databases run in data centres in Germany and Finland, in the European Union. Backups are kept in Finland. - Payments, transactional email, request logs, DNS and the AI assistant are run by sub-processors, most of them in the United States. The Data Processing Addendum lists each one and the country it processes in. - Transfers of personal data out of the EEA, the UK or Switzerland rely on the EU Standard Contractual Clauses, with the UK Addendum where it applies. The sub-processor list is in the [Data Processing Addendum](https://jobspipe.dev/dpa#sub-processors). ## Incident notification We notify affected customers of a personal data breach without undue delay, and in any event within 72 hours of becoming aware of it, as the [Data Processing Addendum](https://jobspipe.dev/dpa#breach-notification) sets out. Service incidents and their history are published on [status.jobspipe.dev](https://status.jobspipe.dev). ## API versioning and deprecation - Every endpoint is under a major version in its path, today /v1. - Within a version, changes only add: new endpoints, new optional request fields, new response fields and new values in open lists. Clients should ignore fields they do not know. - A field or endpoint that is going away is marked DEPRECATED in the OpenAPI document and in the docs, with what to use instead, and keeps working. - Removing a deprecated field or endpoint, or changing what one means, is announced in the changelog at least 90 days before it happens. Read the [changelog](https://jobspipe.dev/changelog). The rules the API contract is held to are in [API governance](https://jobspipe.dev/governance). ## Support lifetime - A major API version is supported for at least 12 months after the next major version is released. Supported means it keeps working and keeps receiving security fixes. - The API, the MCP server, the dashboard and the website are hosted services, so security updates reach every customer when they are deployed, with nothing to install. - The SDKs and the CLI receive fixes on their latest major version. ## Accessibility We build the website, the dashboard and the docs to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA. They have not yet been audited by a third party, so we do not claim full conformance. If anything stops you from using JobsPipe, write to [support@jobspipe.dev](mailto:support@jobspipe.dev) and we will fix it or get you what you need another way. ## Global Privacy Control When your browser sends the Global Privacy Control signal, jobspipe.dev loads none of its third-party analytics scripts. Only our self-hosted, cookie-free analytics and the cookies that keep you signed in remain. The signal is honoured as an opt-out of sale and sharing under US state privacy laws. Our support is declared at [/.well-known/gpc.json](https://jobspipe.dev/.well-known/gpc.json); the [Privacy Policy](https://jobspipe.dev/privacy#cookies) lists the scripts. ## Age JobsPipe is a service for businesses and developers. It is not directed at children under 16, as the [Privacy Policy](https://jobspipe.dev/privacy#children) says. ## Reporting illegal content or misuse Report a posting we serve that is unlawful, or misuse of JobsPipe data, through [Report abuse](https://jobspipe.dev/trust/abuse). People named in a posting can have their name removed through [privacy requests](https://jobspipe.dev/trust/privacy-compliance). ## Software bill of materials A CycloneDX bill of materials for the API, the MCP server, the website and the webhook service is published at [/sbom.json](https://jobspipe.dev/sbom.json). It is generated from the lockfile each release is built from, and lists every npm package installed for it, build and test tools included. ## Switching and exit - Responses are plain JSON described by a published OpenAPI document, so there is no proprietary format to convert out of. - Your monitors and their records can be listed through the API at any time, and your signals in the dashboard and through the MCP server. - Packages are monthly, with no minimum term and no exit fee. Cancel in the dashboard under Settings, Billing; cancellation takes effect at the end of the current billing period, and you keep your allowance until then. - Delete the account yourself in the dashboard under Settings, Profile. Personal data is deleted within 90 days of termination, except where the law requires us to keep it. --- Try it with no key: `curl -d '{"limit":3}' https://api.jobspipe.dev/v1/sandbox/jobs/search`. AI agents: the full machine-readable index of this site is https://jobspipe.dev/llms.txt?src=md-twin - API quickstart, MCP server, pricing. Free key (1,000 jobs to start): https://jobspipe.dev/signup