---
title: "Legal data deserves the highest security standards"
description: "ISO 27001 certified, SOC 2 compliant, EU-hosted: how JUNE protects confidential legal data with encryption, access control, penetration tests and GDPR."
url: https://www.june.tech/security
language: en
---

Security & compliance

# Legal data deserves the *highest* security standards

We built JUNE’s infrastructure and product architecture to meet the requirements of enterprise legal and IT – the same standards you are held to.

[Visit the Trust Center](https://www.june.tech/trust) [Request documents](https://www.june.tech/trust#request)

-   **ISO 27001** Certified ISMS
-   **SOC 2** Certified
-   **GDPR** EU data residency
-   **C5 · TISAX** Certified data centers

Platform security

## Security starts with infrastructure, code and procedures

### Encryption & segregation

Data in transit and at rest is encrypted, stored redundantly and segregated by client or project. Bring your own key if your policies require it.

### Certified EU infrastructure

All data is hosted in certified European data centers – including ISO 27001, 27017, 27018, SOC 1, 2 & 3, C5 and TISAX attestations.

### Identity & access

Multi-factor authentication and single sign-on with Active Directory and other providers. Granular rights per case, team and external partner.

### Audits & pentests

Regular internal audits and penetration tests, plus an ISMS certified to ISO 27001 and controls aligned with SOC 2.

Built for legal

## Controls designed for how legal teams actually work

Security for legal operations isn’t only about servers. It’s about who sees which file, which firm works on which case, and proving what happened.

Full access control with Collab Spaces

Cooperating teams are fully separated in data and resources. Outside counsel works in compartmentalized workspaces with their own inboxes, reports and workflows – you keep full transparency.

beA integration

Incoming beA messages are retrieved automatically and routed into the processing flow; file numbers are added to the file, and letters are sent via beA without leaving JUNE – with attachments sorted directly from the file in the desired order. The required beA certificate is stored in a highly secure data vault, and lawyers keep control of their certificates and the letters sent via their mailboxes at all times.

Data privacy & contractual safeguards

Data residency follows strict EU rules. Validated DPAs, full control over retention and anonymization requests, carefully vetted sub-processors – and a guaranteed fast response time to incoming data-rights inquiries.

Audit trail

Every action, document, deadline and workflow is logged in a chronological case history – reviewable for compliance and quality assurance.

Certified trust

## ISO 27001 and SOC 2 certified

JUNE is aligned with GDPR and follows the privacy and security reporting practices of ISO 27001 and SOC 2. Need our documentation for your vendor assessment? Our team will provide it.

-   **ISO/IEC 27001** Certified ISMS · UKAS accredited
-   **SOC 2** Certified · independent audit
-   **GDPR** EU data residency · EU hosting

## Security review on your agenda?

Talk to our security team and get the documentation your IT, data protection and procurement teams need.

[Request documents](https://www.june.tech/trust#request) [Visit the Trust Center](https://www.june.tech/trust)