Data protection by design

Security and Data Privacy

June's whole design is a small footprint: nothing recorded in front of your customer, nothing we keep afterward contains what anyone actually said, and your system of record stays the only system of record.

Download the security overview (PDF)
Click on thisContact security: it@calljune.ai
Enterprise data protection for voice AI sales data

How data moves through June

The rep calls June from their phone after a meeting. The call is processed in real time: June asks the questions, structures the answers, and writes the update to your CRM through its standard API with your own revocable credentials. The call audio and transcript stay in the voice platform, where immediate deletion after processing can be switched on for you. What persists on your side is the structured update, living in your CRM, where you control retention, access, and compliance.

Step 1: rep calls June after the meeting
Step 1
Rep calls June
Step 2: real-time processing of the debrief
Step 2
Real-time processing
Step 3: CRM write using OAuth and your own credentials
Step 3
CRM write (OAuth, your credentials)
Step 4: audio and transcript retained in the voice platform, with immediate deletion available on request
Step 4
Audio and transcript retainedfrom CallJune and the voice platform
Step 5: the final structured record lives in your CRM
Step 5
Final record lives in your CRM(plus a work order)
Call ID and timestamps
Workflow routing state
Integration status
Audit events

What June never does

June never records your customer meeting

Never records your customer meeting

The rep calls June after the meeting, from the car or the office. The meeting itself is never recorded or monitored, and nothing is visible to your customer.
June never keeps verbatim call content in its own database

Never keeps verbatim call content in our database

Call audio and transcripts are retained in the voice platform. Immediate deletion after processing is a configurable setting and can be enabled for you before go-live on request.
June never trains AI on your data

Never trains AI on your data

API-tier agreements with our model providers prohibit training on customer data. Zero Data Retention agreements are available for enterprise customers.
June never stores passwords or runs a parallel database of your deals

Never stores passwords or runs a parallel database of your deals

Integrations use revocable tokens. Your CRM remains the single source of truth. On our side the durable record is a structured work order. It holds fields only, with no verbatim call content.
Click on thisSend us your security questionnaire: it@calljune.ai

Authentication and isolation

Phone-based two-factor authentication: the rep's registered phone number (calls from unrecognized numbers are not processed) plus a unique per-rep PIN validated before any processing begins. Every rep is scoped to their own CRM identity and can only touch records they own. Organizations are isolated at every layer.

Certifications, stated plainly

Every system in June's data path holds independent SOC 2 Type II certification: the orchestration platform, voice platform, hosting, and the database layer. Our AI provider, OpenAI, is SOC 2 Type II certified and does not train on API data. CallJune's own application-layer SOC 2 Type I is in progress, with Type II to follow. We say it that way because precision is the point of a security page.

Have a security review coming?

Download the overview PDF, or send your questionnaire to it@calljune.ai. We answer fast and in plain language.
Download the security overview (PDF)

Frequently asked questions

Does June record my customer meetings?
No, never. The rep calls June after the meeting. Your customer never sees or hears a tool.
What happens to the call audio and transcript?
Both are retained in the voice platform. Immediate deletion after processing is a configurable setting and can be enabled for you before go-live on request. Retention windows and deletion workflows are configurable per customer.
Where does our data live?
In your CRM, under your controls. CallJune keeps a structured work order: call IDs, timestamps, routing state, audit events, and the structured fields from the debrief. It contains no verbatim call content.
Is CallJune SOC 2 certified?
Our entire infrastructure path (voice, hosting, database, AI providers) is SOC 2 Type II certified. CallJune's own application-layer SOC 2 Type I is in progress, with Type II planned after.
Do you store passwords for our CRM?
No. Integrations use OAuth tokens or scoped API keys you can revoke at any time.
Can you handle our security questionnaire?
Yes. Send it to it@calljune.ai. We support IT reviews, architecture questions, and NDA-gated detail.