Security
Last updated October 23, 2026
- Read-only access to your CRM, with the smallest set of permissions that works. We never write to it.
- CRM access tokens are encrypted at rest (AES-256-GCM). Every message from the CRM is checked against its digital signature before we use it.
- No customer names, emails, phone numbers or message text are stored. Logs and error reports have personal data removed.
- Each business account's data is kept separate, and every request is checked against the account it belongs to.
- TV and phone links use long random keys; we store only a one-way scrambled form, and you can turn any link off instantly. Public pages are rate-limited.
- Hosted on Netlify with HTTPS everywhere; database on Neon in the United States.
- Found a problem? Email hello@goldstandardweb.com.