Built for the agencies and the auditors. Secure by architecture.

Every CRM table enforces database-level row security. Every query is scoped to your agency server-side — never trusted from the request. Cross-tenant data access is structurally impossible.

Email, phone, and other personally identifiable fields are encrypted at rest with per-agency keys — and stay searchable without ever exposing plaintext. Even a database leak doesn't expose PII.

Every CRM write, login, role change, settings change, webhook delivery, API call, and export is captured. Searchable by actor, resource, action, date range. Exportable to CSV. Tamper-evident by design.

Out-of-the-box retention rules per object type, set to defaults that meet US state insurance regulations:

• Policies — 10 years (DOI requirement)
• Clients — 7 years (state privacy + E&O)
• Service Requests — 5 years
• Opportunities & Quotes — 5 years
• Tasks — 3 years

Configurable per agency. Override per object type if your state requires longer.

Place individual records on legal hold with typed reasons: Active Litigation, DOI Audit, Regulatory Investigation, or Other. Holds suspend retention purges until released. Optional expiration date.

Preview exactly what will be purged before it runs. Inspect every record on the chopping block. Cancel or hold any individual record. Audit history of every purge.

Client portal includes data export and deletion request flows out of the box. Requests tracked with a status timeline. Right-to-be-forgotten built in.

7 roles (Owner, Admin, Team Lead, Producer, CSR, Account Manager, Viewer) with hierarchical permissions, plus per-user overrides when someone needs an exception — admins control exactly who sees what.

The audit log is hash-chained — every entry sealed against silent edits, on every tier, never sold back to you as an upgrade. For a full air-gap, an on-prem AI option is available at the Enterprise tier.

Enterprise-grade managed cloud: encrypted in transit and at rest, continuously monitored, automatically backed up, and deployed with regional redundancy.

We don't sell, share, or analyze your agency's CRM data. Our AI providers operate on a per-request basis and never train on your data. A self-hosted AI option is available at the Enterprise tier if you need full air-gap.