Security
CrewForge holds employee records, client work, and company documents, so isolation and access control are not features. They are the foundation the platform is built on.
Most multi-tenant software keeps every customer's rows in the same tables, separated by an ID. CrewForge provisions a dedicated, fully isolated database for each company, and each company runs on its own subdomain. Your data never shares storage with anyone else's.
Isolated database per company
Every workspace gets its own database. There is no shared-table tenancy and no cross-company queries.
Your own subdomain
Each company runs at its own address, with sessions and authentication scoped to it.
Granular permissions
Every capability is its own permission string, assigned through roles, so access follows the job, not the job title.
Sensitive-field gating
Bank details, identity numbers, and emergency contacts are visible only with a dedicated permission, separate from general profile access.
Audit trails by default
Approvals, exits, task changes, and ticket transitions record who did what and when. Deletions are soft, so history survives.
Verifiable documents
Generated PDFs carry a SHA-256 tamper check and a QR code anyone can use to confirm authenticity on a public page.
Segregated portal access
Client portal tokens carry a restricted ability set. A portal session can never reach team operations.
Rate-limited portal sign-in
Clients sign in with single-use email codes that expire in 15 minutes, with throttling against abuse.
We publish the third parties that process customer data and keep our policies in plain language.
One isolated system for people, projects, and clients. Free up to 10 employees.
No credit card. Free up to 10 employees. Or contact our team for a 15 minute walkthrough.