Built to keep customer data safe, at every layer
Security isn't a setting you turn on later. It's in how MarginCRM stores data, who can open it, and what gets recorded when they do.
Fully isolated data
Each organization's records are kept strictly separate, so one customer's data can never show up in another's account.
Encrypted in transit and at rest
HTTPS everywhere with strict transport security. Databases, disks and backups are encrypted, and integration passwords and keys are sealed, never stored in clear text.
Backed up and recoverable
Continuous backups with point-in-time recovery, hosted on Amazon Web Services in the United States.
Everyone sees exactly what they should
Give each person the access their job needs, and nothing more.
- Admin, manager and rep roles, plus custom roles and permission sets
- Managers see their team's records through the reporting hierarchy
- Sharing rules to open up records to other teams
- Hidden and read-only fields, also enforced in search, reports and exports
Strong sign-in, on your terms
Protect every account, and connect your company's identity provider.
- Two-factor sign-in with an authenticator app and recovery codes
- Admins can require two-factor for everyone or for chosen roles
- Single sign-on through OpenID Connect on Enterprise
- API keys that can be read-only and expire, and never manage accounts or billing
Patient data gets its own protection
For health care organizations, objects marked as patient data are handled differently from everything else in the CRM.
- Encrypted with AES-256 before it's stored
- Opened only by people given explicit access, not even admins by default
- Every view is logged
- Kept out of search, reports, exports, automation and the AI assistant
Hosting uses HIPAA-eligible AWS services. Meeting HIPAA also takes agreements, policies and training on your side: talk to us about your requirements.
A record of every change, and tools for every request
Change history
Every record keeps a field-by-field history: who changed what, from what, to what, and when.
GDPR requests
Export everything about a person as a ZIP, or erase them for good, with invoices and payments kept as the law requires.
Support only with consent
Our team can only see your account if an admin grants access. It's time-limited, read-only by default, and logged.
Your data stays yours
Download your whole organization whenever you like. If you leave, deletion waits 30 days in case you change your mind.
Recycle bin
Deleted records, and everything under them, can be restored for 30 days.
AI with guardrails
The AI assistant is off until you turn it on, only sees what the person asking can see, and never changes anything without approval.
Have a security questionnaire?
Tell us what your team needs to review and we'll walk you through how MarginCRM handles it.