Every company's data kept separate
Each company works in its own workspace. Users only ever see records from their own company.
Your leads and customers are your business. Here is how GreenCRM keeps them safe — in the browser, on the server and on your team's phones.
How we protect you
Not an add-on. These protections are on for every company from day one.
Each company works in its own workspace. Users only ever see records from their own company.
Sales see their own leads, managers their team, admins the whole company. Viewer, legal and finance roles see only what they need.
Important actions — user and team changes, tasks, attendance and deal workflow steps — are logged with who did what and when.
Passwords are stored as salted hashes, never in plain text. Sign-in, OTP and password reset requests are rate limited.
Mobile users can sign in with a short-lived, single-use code sent to their work email.
When a user logs out, their session token is revoked on the server and cannot be reused.
The field app keeps its offline tracking queue in encrypted storage and sign-in tokens in the phone's secure store.
Photos attached to leads are not public links. They can only be opened by signed-in users allowed to see that lead.
Your control
Add or remove users, change roles and organise teams from settings. When someone leaves, deactivate them and their access stops.
Our team will walk you through how GreenCRM handles your data.