Security
Your clients trust you with their money. You can trust where it goes.
JPX Desk handles signatures, payments and the inbox your business runs on. Here is how each one is kept safe, in plain terms.
Signing in
- Password and passkeys: Face ID, Touch ID or a security key
- Only approved email addresses can sign in at all
- Sign out everywhere, from Settings, in one tap
Your data
- Row-level security on every table, with no public access
- Mailbox passwords encrypted, with key rotation
- Personal details like IP addresses scrubbed after 180 days
- Kept out of search engines and AI crawlers on purpose
Client signatures
- The client signs the exact version they read, never a later edit
- Name, email, device, time and versioned consent text on the record
- A SHA-256 fingerprint of the signed document and a certificate of completion
- Share links are 32 random bytes, checked in constant time
Payments
- Card details never touch JPX Desk. Stripe holds them
- Only Stripe's signed confirmation can mark a card payment as paid
- A payment page never shows paid because of something in its address
- Refunds and disputes are tracked against the job
AI connections
- OAuth 2.1 with PKCE. The AI never sees your password
- Read access by default. Changes and sending are a separate box you tick
- Short-lived access, a 180-day cap on any connection, revoke any time
- Email and lead text reach the AI labeled as untrusted
The site itself
- An enforced content security policy with a fresh nonce on every request
- HSTS, frame denial and rate limits
- A firewall in front of every public page
E-signatures keep an ESIGN-aligned audit trail. Have your own lawyer review your proposal terms.
What stays internal
The client sees your studio. Nothing behind it.
Some things are yours alone. JPX Desk keeps them off every page, email and PDF a client receives, and a test in the code enforces it.
- Crew names, rates and costs
- Your margin on the job
- Holds you placed for other clients
- Your calendar
- The software you used to send it
Early access
Built for one studio first. Opening to a few more.
JPX Desk runs every booking at JPX Studios in New York today. We're bringing on a small group of photo and video studios next.