Trust · Security
Your data is safe. Your leads are yours.
A plain-English overview of how Montjoy Synapse keeps your business data private. Written for firm owners, not security engineers.
Your account is isolated from every other firm
Each business gets its own private workspace. You cannot see another firm's data, and no other firm can see yours — not their scans, not their leads, not their documents.
Your leads stay yours
Every inbound lead, call, and report is attached to your account only. Agencies see their own clients; individual firms see their own inbox. There is no shared pool.
Your uploads live in a private bucket
Documents you upload on the Account page are stored in a private location that only your logged-in session can open. Nobody else — including other paying customers — can list or download them.
Bank-grade encryption for connected accounts
When you connect Google, OpenAI, or Perplexity, we encrypt the credentials before storing them and never send them back to the browser.
Least-privilege access, everywhere
Every request is checked against who you are before any data is returned. Admin tools require an explicit admin role — being logged in is not enough.
Operated to SOC 2-aligned controls
We run background security scans, log privileged actions, and review every vendor we depend on. A detailed subprocessor list and DPA are available to Elite customers on request.
Need more detail?
Agencies, procurement teams, and enterprise reviewers can request our architecture overview, subprocessor list, incident-response summary, and current DPA. Reach out through the FAQ or your Montjoy Synapse account contact and we will respond within one business day.
Shared responsibility: we operate the platform controls above. You remain responsible for your account credentials and for the accuracy of content you publish through the platform.