How we protect your data.

Data protection

CRM-G uses HTTPS for public connections and Google Cloud encryption for stored application data.

• Public website and application connections use HTTPS.
• Cloud SQL encrypts stored database data using Google-managed keys.
• Workspace administrators control access to customer data.

Access control

Protected workspace operations require authentication and server-side permission checks.

• Personas and capability sets configure object, field, and record access.
• Tenant-scoped access checks and database row-level security support workspace isolation.
• Public knowledge channels are separate from authenticated CRM data actions.

Hosting and recovery

CRM-G application services are hosted on Google Cloud in the US Central region.

• Application services run on Cloud Run; database storage uses Cloud SQL PostgreSQL.
• Automated database backups and seven-day point-in-time recovery are enabled in production.
• Recovery capabilities do not constitute an uptime or recovery-time guarantee.

AI controls

AI is optional and depends on your workspace plan and configuration.

• Signed-in CRM assistant writes require confirmation and applicable user permissions.
• Supported sensitive-data detection and redaction depend on configured policies; they do not guarantee removal of all personal data.
• Administrators can configure AI usage limits, knowledge sources, and available actions.

Security requirements

Discuss your security and data-handling requirements with us before adopting CRM-G.

• CRM-G does not currently claim SOC 2 or ISO 27001 certification.
• No certification date, high-availability commitment, or regulated-data suitability is promised on this page.
• Contact us to review any required contractual or technical controls before sharing sensitive or regulated data.

Service providers

Cloud infrastructure and configured email and AI services support delivery of CRM-G.

• Google Cloud provides primary application hosting and database storage.
• AI processing and knowledge retrieval depend on the providers configured for the workspace or channel.
• Contact security@crmg.ai for processing details relevant to your intended use.

Reporting a vulnerability

If you believe you have found a security issue affecting CRM-G, email us with enough detail to investigate. Avoid including customer data, credentials, or other sensitive information.

security@crmg.ai