Jasper safety profile

What it does with your data

Jasper is a writing assistant built for marketing work. Staff might type a prompt, paste in text or upload material. Jasper’s trust page says company data and outputs are never used to train third-party large language models. That is the main promise it makes about training.

That promise only covers outside models. The vendor pages checked do not say whether Jasper trains models of its own on what customers type. They also do not mention whether people at Jasper review prompts or content. The privacy policy says Jasper uses personal data, including usage data, to provide and improve the service. It does not mention prompts, content or model training.

Jasper keeps customer data for as long as your agreement runs. After the agreement ends, it keeps data under its Data Retention Policy unless it receives a written request to delete it. The security page gives no time period. Usage data is generally kept for a shorter time. The pages checked do not split any of this by tier.

Settings to change first

The vendor pages checked do not describe a setting for opting out of training, and they quote no menu path. That leaves you with steps you can control yourself:

1. Turn on single sign-on if your plan offers it, so that accounts follow your own staff list. The security page lists SSO and SCIM but does not name a menu.
2. Set permissions for each user, and disable accounts when people leave. Jasper’s security page says these tasks belong to the customer.
3. Ask Jasper in writing how to opt out of any training on your content and where that setting lives.
4. Write down who may use the tool and for what tasks, before anyone signs up.

Free and paid tiers

The vendor pages checked do not say how data handling differs between a free tier and paid tiers. None of the statements about training, retention, admin controls or certifications names a plan.

That gap matters. Many AI tools give a free or entry plan fewer protections than a business plan. You cannot assume Jasper works the same way, or that it works differently, because its pages do not say.

Before anyone uses a personal or trial account for work, ask Jasper which plans include the third-party training promise, SSO, SCIM, audit logs and the Data Retention Policy terms. Get the answer by email or in your contract, not from a sales call alone.

Admin controls

Jasper’s security page lists SSO and SCIM. It says users can sign in through their organization’s SSO, with Google, or without a password. It also describes advanced admin controls, secure group settings and AI audit logs. The trust page adds granular permissions for IT and policy-based governance. None of these pages names which plans include these features.

For certifications, the security page shows SOC 2 Compliant, GDPR Compliant, SOC for Service Organizations and PCI DSS Compliant badges. Customers can get Jasper’s SOC2 report from its Compliance Portal. An independent third party assesses Jasper’s security program and runs network and application penetration tests every year. The trust page also says Jasper is compliant with SOC 2, PCI, DPA, CCPA and GDPR.

Using it with donor and client data

Until you have more answers in writing, treat Jasper as a tool for public marketing text, such as event announcements, newsletter drafts or social posts.

Never paste in:

• donor names with gift amounts or giving history
• donor or client contact details
• client case notes
• health, payment or bank details

Confirm these points with Jasper in writing before staff use it with any donor or client data:

• whether Jasper trains its own models on your content
• how to opt out of training, and where the setting is
• which plan your organization needs for the protections its pages describe
• how long data is kept after your agreement ends

The application is hosted in US regions, and the privacy policy says personal data may be moved outside your jurisdiction. If donors or funders expect data to stay in a particular country, ask Jasper about this too.

Questions people ask

Will Jasper use our drafts to train AI?

Jasper says company data and outputs are never used to train third-party large language models. The pages checked do not say whether Jasper trains its own models on your content. Ask before you rely on it.

How long does Jasper keep what we type?

Jasper keeps customer data for the length of your agreement. After that, it follows its Data Retention Policy unless you send a written deletion request. The pages checked publish no time period.

Where is our data stored?

The security page says the application is hosted in the US-East1 and US-East4 regions. The pages checked do not say you can choose a different region.