What we do with your data, stated plainly.
Actualcast handles recordings of real sales conversations and a connection to your CRM. This page describes what is true today. It does not claim a certification the company does not hold.
The narrowest CRM permissions that do the job. Read for the deal sync, and three write scopes for the only three things a confirmed fact becomes: a note, a task, or a deal property. Nothing can touch contacts, companies, or anything else in the portal.
OAuth tokens are encrypted before they are stored, using AES-256-GCM envelope encryption, and decrypted only at the point of use. They are never written to a log.
Nothing reaches your CRM without a person approving it. There is no code path that writes an unconfirmed fact, and every write records who confirmed it and when.
Every extracted fact carries the exact quote and timestamp it came from. A claim that cannot be located in the transcript is dropped rather than guessed.
Where recordings and transcripts live
Recordings are captured through Recall.ai, which joins meetings as a bot. Transcripts are stored with speaker turns and millisecond timestamps so a fact can point back at the exact line that produced it. Every row that belongs to your organisation carries your organisation id, and all data access runs through a repository layer that requires that scope. A user in one organisation cannot read or change another organisation’s data, and that is covered by tests.
Retention and deletion
Audio is kept for 180 days by default. A per-organisation setting and a flow to purge an organisation’s recordings and transcripts on request are being built and are not available yet. Until they ship, a deletion request is handled by hand. We would rather say that than imply a self-serve control that does not exist.
The language model
Extraction calls the Anthropic API directly. Transcript content is sent only for the purpose of extracting the facts on a call, and is not routed through any third-party gateway or any other product. Logs from the extraction pipeline carry counts and costs, never a quote and never a line of transcript.
Compliance
Actualcast is not SOC 2 certified and does not claim to be. When an audit is actually underway this page will say so, in those words, and not before.
Reporting a problem
If you find a security issue, email security@actualcast.com. We read it.