Security

Your business data stays your business's

Many businesses use ARC CRM. This is how we keep each one's clients, invoices and team separate and safe.

◈

Separate data per business

Every record carries the business it belongs to, and the server adds that check to every read and write. Opening another business's record, even by guessing its number, returns "not found".

◐

Roles checked on the server

Admin, Accounts and Sales see and change only what their role allows. The rules are enforced by the server, not just hidden in the screen.

✓

Passwords done properly

Passwords are stored only as BCrypt hashes. After five wrong attempts an account is locked for 15 minutes.

✎

Locked invoices

Issued invoices and receipts can only be edited with a separate edit password, so numbers and amounts can't change quietly.

▤

Audit log

Every create, change, issue, cancel and delete is recorded with the person and time, and your admin can review it.

🔒

Encrypted in transit

All traffic uses HTTPS. Document links sent to clients are signed and expire, and open only that one document.

Your control

You decide who is in your team

Your admin adds and removes users, resets their passwords and can switch an account off at once. When someone leaves, their leads, tasks and documents stay with your business.

  • New businesses are checked by Archaic Infotech before they go live
  • Database backups are taken every night
  • Staff ID papers in the document vault are encrypted (AES-256-GCM)
  • Every report and list can be exported as CSV, so your data is never stuck

Questions about your data?

Write to us and we'll answer them directly.