SentinelCRM Sign in Start free
Security

Your customers' details, handled with care.

A CRM holds names, numbers and conversations your customers trusted you with. This page sets out what Sentinel does to protect them, in plain terms.

Sentinel's security covers isolation between businesses, encryption in transit, encrypted storage of channel access tokens, role-based access, optional two-factor sign-in, an audit log, automatic backups, a 30-day recycle bin and full data export.

The controls in place

Isolation
Each business's data is separate. Requests are checked so records from one workspace can't be referenced from another.
Encryption
HTTPS everywhere with HSTS. Tokens for connected WhatsApp, Instagram and Messenger accounts are encrypted at rest.
Sign-in
Optional authenticator-app two-factor sign-in, lockout after 5 wrong passwords, and per-address rate limits.
Recovery
Automatic database backups, and a recycle bin that keeps deleted records for 30 days.

Access inside your team

Roles

Owner, admin, manager and executive. Each role sees and changes only what it should.

Audit log

Important changes are recorded with who made them and when.

Approvals

On the Business plan, moving a deal into chosen stages, such as Won, can require a manager's approval.

Infrastructure

Sentinel runs on Amazon Web Services. The database has no public address: only the application server can reach it. The server accepts web traffic over HTTPS only, keeps operating-system security patches up to date automatically, and allows administrative access by key only.

Every request that changes data is checked to come from Sentinel itself (protection against cross-site request forgery), and responses carry standard security headers.

Your data, your decisions

Your business owns the leads, contacts and messages it puts into Sentinel. We don't sell it or use it for advertising. Export everything at any time; when you stop using Sentinel, you can ask us to delete your data. The privacy policy has the details, including how optional AI analysis works.

What we don't claim: Sentinel does not currently hold third-party certifications such as ISO 27001 or SOC 2. If your business needs a security questionnaire answered, ask us and we'll answer it accurately.

Questions

Where is my data stored?

In a managed database on Amazon Web Services. Ask us if you need the specific region for your compliance records.

Does the AI train on my conversations?

No. The built-in model runs inside Sentinel. When optional advanced analysis is on, the relevant text is sent to the AI provider (Google or Anthropic) to produce a result.

Can I turn on two-factor sign-in for my account?

Yes, from your account's security settings, using any authenticator app.

Every enquiry answered. Starting today.

Free for 2 users, no card required. Connect an inbox and your first leads are sorted in minutes.