Security

Where your data is

• Client systems run on dedicated servers we manage, in the EU, with some files stored in Israel. Not on a shared software platform.
• This website holds no client data, sets no cookies and loads nothing from other servers.

Separation between clients

• Each client has its own database, files and service account. Nothing of one client's is ever shown to another, or used for another.

Access

• Only youcrm's engineer has administrative access to the servers, and every change that touches your data, money or a portal submission is reviewed before it goes live.
• Your staff sign in to your own system and see what their role allows.
• Passwords and keys are kept out of the code, readable only by your system.

Network

• All traffic is encrypted. The systems are reachable only through an encrypted gateway, and nothing else is exposed to the internet.

Approvals and audit

• A sensitive action (a payment, a message to a customer, a change to records) waits for a person's approval, or goes out from a template you approved in advance.
• Every run is logged step by step: what came in, what the system did, and who approved what.

Operations

• Security updates install automatically, and the servers are monitored around the clock.

AI

• Models from leading AI providers, called through their APIs. A model receives only what the task needs.
• We don't train models of our own on your data, and each AI capability can be switched off separately.

Your data, and leaving

• Your data, configuration, WhatsApp number and portal access are in your name.
• On exit you get a full export of your data and configuration in documented formats within 30 days, and we delete it from our servers on request.

For your security review

• Sample documents for a pilot are shared under an NDA, and the pilot needs nothing installed on your side.
• The list of providers that process data, and answers to your security questionnaire, are available on request.

Privacy policy