Security

The controls a workspace can actually turn on.

This page describes the product as it is. It is not a certification and it is not a promise that a third-party channel will never have an outage.

• Sign-in you can lock down

  Email and password, plus an authenticator code when two-factor is on. Two-factor is available on every plan, including Free Starter. Five failed passwords lock the sign-in.

• Roles with a hard edge

  On Growth Team and Pro Agency, admins invite agents and choose which parts of the CRM each person can open. Agents do not inherit the whole desk. Free Starter and Solo Sales are a single seat.

• Assigned work stays assigned

  A lead given to an agent is that agent’s book. Deal lists hide email and phone unless the person also has access to Contacts.

• Keys and mailboxes are credentials

  API keys, connected mailboxes, and channel tokens are secrets. Rotate a key if it leaks. Disconnect a channel you no longer use. The public API can create contacts. It is not a back door past the contact cap.

• Documents and signatures

  PDFs can be locked and shared by a link. A signature is stored with the file. The link is a capability. Treat a share link the way you would treat the file itself.

• Infrastructure we run

  The product runs on servers we administer, with PostgreSQL as the database. We do not rent the CRM from another CRM. We do not claim a SOC 2 or ISO certification. If we obtain one, this page will say so.

Where the legal detail lives

Processing terms, subprocessors, and breach notice are in the Data Processing Addendum. AI prompts and logs are in the AI Use Policy. Questions: privacy@pipecove.com.