Security

Sales teams trust us with conversations, margins and contacts. We treat that responsibility as a product requirement, not a footnote.

Encryption and infrastructure

• Data in transit over TLS.
• Data at rest encrypted at the database provider (Supabase).
• Calendar tokens encrypted at the application layer before they are stored.

Access and isolation

• Authentication by user and organisation.
• Row-level security in the database, by organisation and role.
• Least privilege throughout the ERP integrations.

AI and data

• Meeting content is not used to train third-party models.
• Approval flows before any email or sensitive CRM update.

Compliance

Built for GDPR: data subject rights, sub-processors and processing agreements. ISO 27001 certified. Further formal certifications (SOC 2 and the like) will be announced when available.