Skip to content

Trust Center

Review platform security controls, provider assurance and the requirements for your use of SMBcrm.

Security

Platform security controls

Encryption, controlled access and monitored infrastructure protect customer information and support reliable day-to-day operations.

  1. Platform Encryption

    Platform data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher.

  2. Redundant Infrastructure

    The platform runs on redundant infrastructure. The platform engineering team manages infrastructure recovery.

  3. Account Access

    Administrators can enforce two-factor authentication and assign permissions based on each user's role. Audit logs record user actions and configuration changes.

  4. Continuous Monitoring

    Continuous security monitoring and vulnerability scanning help detect threats and identify weaknesses.

  5. Daily Database Backups

    Platform databases are backed up daily. Backup and restoration procedures are tested at least annually.

  6. Penetration Testing

    The platform undergoes annual third-party penetration testing. Applications and infrastructure follow controlled development and change-management processes.

Database Backups
Daily
platform databases
Encryption
AES-256
platform data at rest
SOC 2 Type II
Annual
platform provider assessments
Security Monitoring
24/7
continuous platform monitoring
Compliance

Platform assurance and service requirements

Provider assurances apply to the provider's platform and security operations. SMBcrm-managed services and custom integrations have separate security responsibilities.

  • ISO/IEC 27001:2022

    Platform provider certification

    SMBcrm's underlying platform provider maintains ISO/IEC 27001:2022 certification.

  • SOC 2 Type II

    Platform provider assurance

    Annual assessments cover security, availability and confidentiality.

  • GDPR & CCPA

    Privacy notices

    Our Legal Information page explains personal data handling, privacy rights and request processes.

  • HIPAA

    Available with Additional Terms

    HIPAA-compliant service is available with additional fees and an annual commitment. It is not included automatically with a standard subscription.

    Contact SMBcrm for eligibility and terms
Data Privacy

How We Handle Your Data

Our Privacy Policy explains how personal information is handled, retained and deleted.

Data Ownership
You own your customer data. Our legal terms explain how it is processed to provide and support the service, connected integrations and legal obligations.
Data Location
The platform uses U.S. cloud infrastructure and international service providers. Contact us about specific data residency requirements.
Data Portability
Export options vary by record type and feature. Check the supported fields, formats and history for the data you need to retain or move.
Data Deletion
Deletion and retention requests are handled according to our data retention policy and applicable law.

Your Privacy Rights

  • Right to Access — Request a copy of all data we have about you
  • Right to Rectification — Correct inaccurate personal data
  • Right to Erasure — Request deletion of your personal data
  • Right to Portability — Export your data in standard formats
  • Right to Object — Opt out of certain data processing

For privacy requests and data processing agreements, contact:

support@smbcrm.com
Documentation

Discuss your security requirements

Send your security questionnaire or requirements to support@smbcrm.com. Include the services you plan to use, the types of data involved, any residency requirements and your review deadline.

Read the Security & Compliance overview for platform assurance, access controls and recovery practices.

Discuss Security Requirements View Privacy Policy
60-day money-back guarantee

Security you can build on.

Explore platform security controls and discuss the requirements for your business.

Get Started Schedule a Demo

  1. 60-day money-back guarantee

    Eligible Startup and Professional initial subscription fees only. Usage and add-ons are excluded. Read the refund terms.

  2. No setup fees

    Plan your setup with training and support

  3. Cancel anytime

    No long-term contracts, stay because you want to