Security and data handling

• Organization isolation

  Every request is checked on the server against your organization; records, files, reports, search and AI answers never cross organizations.

• Roles and record scope

  Roles decide what each person can see and change: their own records, their team, their department or the whole organization.

• Field security and sharing rules

  Hide or lock individual fields per role, and share a department’s records with another only when you decide to.

• Two-factor sign-in

  Authenticator-app codes with backup codes; platform administration requires it.

• Audit log

  Sign-ins, configuration changes, billing events, approvals and exports are recorded with who and when.

• AI with approval

  The assistant answers from records you may see. Consequential actions go through an approval step first.

• Secure payments

  Card details are handled by our payment partner, never stored by NexCRM. Your subscription status is updated from signed, verified payment notifications.

• Your data stays yours

  Export your organization’s data from the app. When a trial ends, data is kept and the workspace becomes read-only until you subscribe.

NexCRM does not currently hold third-party security certifications. Questions about hosting, retention or a data processing agreement: contact@nexcrm.live.