01
Separation between companies
Each company works in its own protected business environment. Access controls are designed to prevent one customer company from accessing another customer company's information.
Security at NordCRM
Security designed for business data
NordCRM is designed to keep each customer company's information within its authorised business environment. Access is permission-based, account activity is protected and security is reviewed as the service develops.
Protection principles
How NordCRM protects access and business information
02
Permission-based access
Roles and permissions determine which parts of the CRM a user may read or change. Company administrators control which people receive access.
03
Protected account access
Account verification, secure sessions and controlled recovery flows help protect user accounts and reduce the risk of unauthorised access.
04
Protection against misuse
Sensitive account and sign-in flows include safeguards that limit automated attempts and discourage unauthorised use of the service.
05
Traceable administration
Important administrative account and permission actions are recorded so that responsible company users can review relevant events in the system.
Continuous improvement
Security is ongoing work
NordCRM reviews security as the service develops. Improvements are prioritised according to risk, customer needs and changes to the product without publishing operational protection details.
Shared responsibility
Customers also control access
Company owners should use unique passwords, assign the least required role, pause accounts that no longer need access and review invitations before they are accepted. Never share passwords or reset links.
Security contact
Report a security concern
Contact us if you discover something that may affect the security of NordCRM. Describe the concern without including customer information, credentials or other confidential material.
Include in your report
- ✓A short description of the concern
- ✓The affected area of the service
- ✓When you observed it
- ✓How we may contact you
Do not email passwords, access tokens or personal customer data.
info@nordcrm.se