Security & data handling
You're trusting it with a customer database. Here's how it's protected.
CRM Anvil will never ask for your password.
Not for your CRM, not for your email, not for anything. Connections use OAuth or scoped keys that you issue and revoke.
Controls
Secure by default
Least privilege, scoped access, tenant isolation and short retention — switched on from day one.
Scoped access, no passwords
Connections use OAuth or scoped API keys you issue and can revoke at any moment. Audit scopes are read-only.
Encryption
TLS 1.2+ in transit and strong encryption at rest, including staging copies and backups. Keys are managed separately from data.
Tenant isolation
Every request, export, report and attachment is checked against the workspace it belongs to.
Roles & permissions
Least privilege by default, with separate rights to read, review, approve, execute, export and administer.
MFA & SSO
Multi-factor authentication for privileged users and single sign-on for your organisation.
Audit logs
Access, exports, merges, rule changes and permission changes are logged and exportable.
Retention & deletion
Configurable retention, with verified deletion of source files, staging data and credentials.
Processing location
Processing in UAE and EU regions. You choose the region before any data moves.
Sub-processors
A short, disclosed list of infrastructure, AI and enrichment providers, named in the DPA.
AI data handling
AI that works for you, not on your data
The AI layer follows the same permissions as the rest of the CRM and keeps a person in charge of every consequential change.
- Customer data is never used to train general-purpose models
- Answers only use records the user is allowed to see
- Generated content is marked as a draft until approved
- Only the minimum needed is sent to a model provider
- AI can be switched off per workspace
- AI-assisted actions are logged
Roles
Everyone sees exactly what their role needs
| Role | Typical permissions |
|---|---|
| Workspace owner | Billing, workspace settings, access management and retention policies |
| Administrator | Connectors, mappings, rules, jobs and user permissions |
| Data steward | Review duplicates, approve merges, resolve conflicts |
| Migration lead | Mappings, dry runs, approvals and cutover |
| Sales user | Leads, contacts, deals and activities they're allowed to see |
| Analyst | Reports, filters and permitted exports |
| Auditor | Read-only access to job history, policies and audit events |
| Agency partner | Only the client workspaces explicitly assigned to them |
Paperwork
Data Processing Agreement
Our standard DPA covers processing purpose, sub-processors, AI processing, security measures, breach notification and deletion. It's available before you commit, and we'll review yours if your legal team prefers.
What CRM Anvil never does
Five hard lines
- 01Ask for a password or a login to any of your systems.
- 02Clear an opt-out without authorised evidence — in a merge, an import, a migration or an automation.
- 03Fill a field with a guessed value when no reliable source exists.
- 04Use your data to train general-purpose AI models, or share it with another customer.
- 05Take card details on its own forms — payment uses a hosted checkout.
Security questions for your review?
Bring them to a demo — we'll walk your team through the controls.