Warning: Draft — pending legal review This page is a working draft. Our lawyer reviews it before Josie launches, and the reviewed version replaces it.

Security

How Josie protects your calls

Plain answers about what Josie keeps, who handles it for us, what is built today and what is still ahead.

Last updated

What Josie keeps

When Josie answers a call for your business, these are the records she creates.

  • Call transcripts and summaries.
  • Bookings Josie makes for callers.
  • Contacts: the name and number of the people who call.
  • The text messages Josie sends and receives for you.
  • Call recordings on Pro and Premium, never at healthcare practices: sealed with your business's own key and kept 30 days on Pro or a year on Premium.
  • You choose how long Josie keeps what callers said, from 30 days to 2 years, and every night Josie deletes what is older. When each call came in and how it ended stay, so your numbers don't change.
  • Export or delete all of your business's data yourself, and a caller's data when they ask.

How it is protected

  • Call transcripts, summaries, messages and caller details are encrypted with a key unique to your business.
  • The database itself keeps each business's data apart, not just our code.
  • Limited, audited access for our own staff: each look at a business's data needs a reason, ends on its own, and is recorded where the owner can see it.

What callers hear

This is how every call opens. The business name below is an example.

  • Josie says she is an AI, and that the call is transcribed, at the start of each call.
Example: what a caller hears
Thanks for calling Riverbend Martial Arts. I'm Riverbend Martial Arts' virtual AI assistant. This call is recorded and transcribed.
Gracias por llamar a Riverbend Martial Arts. Soy asistente virtual con inteligencia artificial de Riverbend Martial Arts. Esta llamada se graba y se transcribe.

Who handles it for us

Josie works with other companies to answer calls, send texts, host the service and take payments. Each one is listed with what it does, what it receives and where it works.

See all subprocessors

Healthcare practices

We'll open Josie to healthcare practices once every company that handles patient information for us has signed a BAA with us. Before you go live, we sign one with your practice.

On our roadmap

These are not in place today. We list them so you know what is coming.

  • SOC 2 Type I is planned. We have not achieved it.Planned

Report a security issue

If you think you have found a security problem in Josie, write to us at the address below. Please give us a reasonable time to fix it before you share it.

Security address
security@getjosie.com
Machine-readable contact (security.txt)
/.well-known/security.txt