We protect your business data with industry-leading encryption, strict access controls, and compliance with global security standards.
How We Protect You
AES-256 encryption at rest and TLS 1.3 for all data in transit. Your data is encrypted end-to-end — in the database, in backups, and during every API call.
Role-based access with granular permissions. Every workspace is fully isolated with multi-tenant architecture. SSO and 2FA available on Business+ plans.
Hosted on AWS with SOC 2 certified data centers. Automated patching, network firewalls, DDoS protection, and real-time intrusion detection.
Full GDPR compliance with data processing agreements, right to erasure, data portability, and transparent privacy practices. Your data is never sold.
All payments processed through Stripe with PCI DSS Level 1 compliance. We never store full card numbers — Stripe handles all sensitive payment data.
Continuous monitoring with automated alerts for anomalies. Comprehensive audit logs track every access and change across your workspace.
Your Data, Your Control
You own your data — always. We provide full transparency into how it's stored, processed, and protected. Export everything at any time.
Export all your contacts, deals, tasks, emails, and files in CSV or JSON format at any time from your account settings.
After account closure, your data is retained for 30 days for recovery, then permanently deleted. Backups are purged within 90 days.
Your business data is never sold, shared with third parties for marketing, or used to train general-purpose AI models.
Each workspace is fully isolated at the database level. One tenant's data can never be accessed by another — even in error.
Our AI features are designed with privacy and security at their core.
AI processes your data on our secure infrastructure. Outputs are generated specifically for your workspace and never shared.
Your data is never used to train general-purpose AI models. It only powers features within your own workspace.
AI suggestions are always clearly marked. You review and approve every AI-generated output before it's sent or applied.
Our team is happy to discuss our security practices, provide documentation, or answer any compliance questions.