Security

How we protect your data

Infrastructure

NexusCRM is hosted on enterprise-grade cloud infrastructure with automatic scaling, redundancy, and 99.9% uptime SLA. All services run in isolated environments with strict network policies.

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. API keys and sensitive credentials are stored using industry-standard secret management.

Authentication

We use Clerk for authentication, providing secure sign-in with support for multi-factor authentication (MFA), social login, and enterprise SSO. Session tokens are short-lived and automatically rotated.

Database Security

Our database uses Supabase with Row Level Security (RLS) policies ensuring users can only access their own data. All queries are parameterized to prevent SQL injection attacks.

AI Data Handling

Your CRM data processed by our AI features is not used to train AI models. AI conversations and insights are scoped to your account and are not shared across users.

Reporting Vulnerabilities

If you discover a security vulnerability, please report it responsibly through your account dashboard. We take all reports seriously and will respond promptly.