generated: '2026-07-19'
method: searched
source: https://www.jamasoftware.com/trust/
standards:
  - id: soc2-type2
    conforms: true
    evidence: SOC 2 Type II certified application and data center (trust page).
  - id: tisax-level2
    conforms: true
    evidence: Jama Connect is TISAX Level 2 certified for automotive-industry compliance.
  - id: tuv-sud
    conforms: true
    evidence: Jama Connect is validated by TÜV SÜD for safety-related development.
  - id: gdpr
    conforms: true
    evidence: GDPR privacy compliance referenced on trust and privacy pages.
  - id: nist
    conforms: true
    evidence: Security policy is based on NIST standards.
  - id: owasp
    conforms: true
    evidence: Development follows OWASP best practices; daily static/dynamic scans and third-party pen testing.
  - id: oauth2
    conforms: true
    evidence: REST API supports OAuth 2.0 client-credentials grant.
  - id: tls
    conforms: true
    evidence: All API traffic secured with TLS (TLSv1.3 probed on www host).