Security
Last updated October 25, 2026
- CRM tokens, phone numbers, IP addresses and message text are encrypted at rest (AES-256-GCM).
- Every CRM webhook is checked against the CRM's published signing key; duplicates are ignored.
- Consent records are append-only and hash-chained per account: the database refuses edits, and a nightly check proves the chain is intact.
- Each account sees only its own data; agency views only cover accounts installed by the same agency.
- Logs never contain tokens, phone numbers, emails or message text.
- Report a problem: hello@goldstandardweb.com.