Trust Center
Built for teams that handle sensitive conversations
SalesJim is designed for healthcare and high-trust sales environments. Customer data is hosted in the EU, encrypted end to end, and never used to train third-party AI models.
Compliance
Standards we align to
We continuously strengthen our controls so clinics and enterprises can adopt SalesJim with confidence.
SOC 2
We are actively working toward SOC 2 Type II. Our controls for security, availability, and confidentiality are being formalized for independent audit.
GDPR
We process personal data in line with GDPR. A Data Processing Agreement is available for customers, and EU residency is a core design choice-not an afterthought.
Read our Privacy PolicyHIPAA
We apply HIPAA Safe Harbor-oriented techniques including data minimization, obfuscation, and anonymization where appropriate, to help keep protected health information secure.
Read our Privacy PolicyControls
How we protect your data
Practical safeguards across infrastructure, access, AI processing, retention, and incident response.
EU data residency
Recordings, transcripts, and application data are stored and processed in the European Union. Our subprocessors are configured for EU regions so patient and prospect data stays in the EU.
Encryption everywhere
Data is encrypted in transit (TLS) and at rest. Production workloads run on secure cloud infrastructure with daily backups and network isolation.
Least-privilege access
Organizations are isolated by design. Role-based permissions control who can view recordings and patient-related records. SalesJim staff access to production is restricted, audited, and used only when necessary.
AI without surprise reuse
We never allow external AI providers to train on your data. Providers are configured with no-training / enterprise terms. Anonymized product improvement is off by default and can be opted out of in Settings.
Retention you control
Recordings are private by default. Delete individual recordings anytime, or request full account data deletion. We honor contractual and legal retention requirements.
Monitoring & response
We monitor for errors and abuse, investigate security reports, and notify affected customers without undue delay when a personal-data incident requires it under applicable law.
Who can see patient data
Trust starts with clear boundaries-between customers, within your team, and with SalesJim.
- Strict tenant isolation so one organization cannot access another’s data.
- Role-based access so only authorized users in your account see recordings and CRM fields.
- No standing production access for SalesJim employees; privileged access is limited, time-bound, and logged.
- Support access only when you request help, and only to the extent needed to resolve the issue.
Recording stays intentional
Nothing runs in the background. You decide when a conversation is captured.
- SalesJim never auto-joins or auto-records meetings-you start capture manually.
- Desktop works with Zoom, Meet, Teams, and other platforms; mobile is built for in-person visits.
- Customers remain responsible for obtaining any required consent from recorded parties.
- Transcription and summarization use enterprise-grade providers under contractual data-protection terms.
Infrastructure
Subprocessors
We only use vetted providers. Every subprocessor below is configured with EU server locations and held to high security standards via contract.
| Subprocessor | Services | Server location |
|---|---|---|
Google Cloud (Google LLC) Mountain View, CA, USA | Cloud hosting and infrastructure; AI-powered platform features (e.g. generative AI, model inference) | EU |
Vercel, Inc. San Francisco, CA, USA | Application hosting and deployment for the platform front end | EU |
Supabase, Inc. San Francisco, CA, USA | Database hosting and backend infrastructure (Postgres, authentication) | EU |
Upstash, Inc. San Francisco, CA, USA | Serverless Redis and message queue infrastructure (caching, rate limiting, background messaging) | EU |
Mailgun Technologies, Inc. San Antonio, TX, USA | Transactional and outbound email delivery | EU |
Sentry San Francisco, CA, USA | Application error tracking and monitoring | EU |
Stripe, Inc. San Francisco, CA, USA | Payment processing for subscription billing | EU |
Deepgram San Francisco, CA, USA | Speech-to-text platform | EU |
We will notify customers of material subprocessor changes as described in our Privacy Policy and DPA. US-headquartered vendors process data in EU regions under appropriate transfer and contractual safeguards.
Security review? We’re ready.
Request our Data Processing Agreement, share your questionnaire, or ask our team how SalesJim fits your compliance program.
Responsible disclosure
Report potential security vulnerabilities to security@salesjim.com