Web and data security
BioJejak handles your custody records, field evidence, and transactions, so protecting them is built into how the platform runs — not bolted on afterwards.
Encrypted in transit
All traffic between your devices and BioJejak travels over HTTPS/TLS. The website and field web app are served only over HTTPS — any plain HTTP request is redirected to the secure connection — and the mobile app connects over HTTPS only, refusing to send API calls in the clear. Secure-session and HSTS protections keep that encrypted connection enforced for the life of your session.
A deliberately narrow door
The public internet can reach only what it needs to — the website and the application endpoint. Administrative systems are not publicly exposed. Traffic reaches our servers through a protected edge, where automated scanning and abuse are filtered before they ever touch your data.
Hosted in the European Union
Your data is stored on servers located in the EU, under one of the strictest data-protection regimes in the world — the same standards that govern how European companies must handle personal and commercial data.
Access tied to who you are
Every user signs in to their own account, and what you can see and do is scoped to your role — producer, transporter, facility, or administrator. Custody actions are recorded against the account that made them, so the chain is both private and accountable. Evidence photos and files are shared through short-lived, expiring links, not left open to the web.
Communications stay controlled
Our systems send notifications outbound only; there is no open mailbox for attackers to target. Enquiries and support run through published, monitored channels.
Your data is yours
Your listings, transactions, and evidence belong to you. We use them to operate the platform and provide the services you've asked for — not to sell on.
BioJejak is in active pilot. We continue to harden the platform as it grows, and we're glad to walk serious partners through our security posture in detail.