Legal and commercial policy

Security at CRMExpert

Technical and operational controls used to protect customer accounts and tenant data.

Effective and last reviewed: 30 July 2026
This policy applies to services supplied under the CRMExpert brand by CRMExpert.

Tenant isolation

Company-scoped authorisation, ownership validation and permissions are designed to prevent cross-tenant access.

Application protection

Hashed passwords, restricted routes, environment secrets, CSRF protection, webhook signatures, throttling, security headers and audit trails reduce common risks.

Operations and disclosure

Health checks, queue monitoring, alerts and controlled backups support recovery. Report suspected vulnerabilities privately and do not access data that is not yours.

Include your registered account email and invoice or receipt number in billing requests. You can also use our contact/request form.