Security and how we handle your data
Your customer list is one of the most valuable things your business owns. Here’s how the Keystone platform keeps it separate, protected and yours.
How data is protected
- Separate workspaces
- Every business gets its own workspace. Records are tied to that workspace and the platform checks it on every request, so one business can never see another’s data.
- Database row-level security
- As a second line of defense, the database itself refuses access to records from any connection other than the platform’s own.
- Hashed passwords
- Passwords are stored only as salted scrypt hashes, never in readable form.
- Encrypted connection keys
- Keys for the services you connect, like email, payments and calendars, are encrypted (AES-256-GCM) and never sent back to the browser.
- Secure sessions
- Sign-in uses secure, HTTP-only cookies, protection against cross-site request forgery, and encrypted HTTPS connections.
- Rate limits
- Sign-in, sign-up and public forms are rate limited to slow down automated abuse.
Who can see what
- Roles and permissions
- Owners decide what each team member can see and do. Revenue figures, for example, can be limited to the people who need them.
- Audit log
- Important changes, such as settings, permissions and records, are logged with who did them and when.
- Client portal
- If you invite your own customers into a portal, they see only their own projects, invoices and documents.
Your data, your choice
- We never sell your data or your customers’ data.
- You can export your leads and records whenever you like.
- If you leave, you take your data with you.
- Automated messages honor opt-outs: STOP for texts and unsubscribe links in email.
- Read the full privacy notice for what we collect and why.
Common questions
Do you have security certifications?
We don’t claim certifications we don’t hold. If your business needs a specific standard, ask during the audit and we’ll answer plainly.
Related
About
Keystone Solutions builds AI systems that give small businesses their time back: every lead answered, every follow-up handled, and the owner in control.
CRM setup and cleanup
One organized place for every customer, lead and job: we set up your CRM, import your contacts, merge duplicates and build a pipeline that fits.
Contact
Contact Keystone Solutions about AI lead response for your business, pricing, an existing account, partnerships or anything else.
Security questions?
Send us your questions or your security questionnaire and we’ll reply by email.
Thanks, your message is in.
your message is in. We’ll reply by email.
This form opens shortly. In the meantime, email us and we’ll reply.