Security & Compliance
Security built into the platform behind your business.
SMBcrm combines encrypted data storage, controlled access and monitored infrastructure to protect customer information and support reliable day-to-day operations.
Last updated:
Platform assurance
SMBcrm's underlying platform provider maintains ISO/IEC 27001:2022 certification and undergoes annual SOC 2 Type II assessments covering security, availability and confidentiality.
These assurances apply to the provider's platform and security operations. SMBcrm-managed services and custom integrations have separate security responsibilities.
- SOC 2 Type II
- Platform provider assurance
- ISO/IEC 27001:2022
- Platform provider certification
- AES-256 encryption
- Platform data at rest
Data protection
Platform data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Customer accounts are logically separated, and role-based permissions control access to data and features.
Account access
Administrators can enforce two-factor authentication and assign permissions based on each user's role. Audit logs record user actions and configuration changes.
Monitoring and security testing
The platform uses continuous security monitoring, vulnerability scanning and annual third-party penetration testing. Applications and infrastructure follow controlled development and change-management processes.
Backup and recovery
Platform databases are backed up daily. The platform runs on redundant infrastructure, and backup and restoration procedures are tested at least annually. The platform engineering team manages infrastructure recovery.
Privacy and data handling
Our Legal Information page explains how personal information is handled, retained and deleted. Contact support@smbcrm.com for privacy requests and data processing agreements.
The platform uses U.S. cloud infrastructure and international service providers. Contact us about specific data residency requirements.
Security reviews
Send your security questionnaire or requirements to support@smbcrm.com. Include the services you plan to use, the types of data involved, any residency requirements and your review deadline.