How we keep your data safe

Your CRM holds your homeowners’ names, addresses, contracts and payments. This is how we protect them.

Each company’s data stays its own

Every lead, appointment, contract and payment belongs to one company, and every request is checked against the company of the person making it. One company cannot see another’s records, and Closenture staff do not browse customer data.

Signing in

  • Passwords are stored as salted scrypt hashes, never as text.
  • Two-step sign-in with an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others), with one-time recovery codes. Owners can require it for admins or for everyone.
  • Repeated failed sign-ins and wrong codes are slowed down and then blocked.
  • When someone leaves, turning them off ends their access and hands their leads, appointments and tasks to the office.

Who sees what

Roles decide who sees every lead, who sees money and who can change settings. Setters see their own leads, closers see their visits, crews see their jobs without prices, and a manager limited to an office sees only that office.

Encryption

  • All traffic uses HTTPS, with HSTS so browsers never fall back to plain HTTP.
  • Secrets such as two-step sign-in keys and connections to calendars and ad accounts are encrypted with AES-256-GCM before they are stored.

Contracts

Each signature is tied to a SHA-256 fingerprint of the exact contract the homeowner saw, with the time, the signer’s consent to sign electronically and the seller’s details as they were at signing.

AI

Ask AI and the AI review use Claude, by Anthropic. The AI never touches the database: it can only run read-only reports for the person asking, within their company and their permissions. It receives totals per group and the names of lead sources, campaigns, services and team members, never a customer’s name, phone, email or address. Each question starts fresh, integrations cannot use it, and each company has a daily question limit and a monthly spending cap. Anthropic does not use data sent through its commercial API to train its models. More on how the AI works.

Backups

The database is copied every day without stopping the app, and the last 14 copies are kept.

Your data is yours

Export your leads, appointments, jobs and money as CSV files at any time. When you leave, we delete your company’s data on request; see the privacy policy and data deletion.

Report a problem

If you think you have found a security issue, email [email protected] with the subject “Security”. We answer every report.