Security

Your Company's Data, Properly Isolated

CrewForge holds employee records, client work, and company documents, so isolation and access control are not features. They are the foundation the platform is built on.

One database per company, not one table column

Most multi-tenant software keeps every customer's rows in the same tables, separated by an ID. CrewForge provisions a dedicated, fully isolated database for each company, and each company runs on its own subdomain. Your data never shares storage with anyone else's.

How access is controlled

Isolated database per company

Every workspace gets its own database. There is no shared-table tenancy and no cross-company queries.

Your own subdomain

Each company runs at its own address, with sessions and authentication scoped to it.

Granular permissions

Every capability is its own permission string, assigned through roles, so access follows the job, not the job title.

Sensitive-field gating

Bank details, identity numbers, and emergency contacts are visible only with a dedicated permission, separate from general profile access.

Audit trails by default

Approvals, exits, task changes, and ticket transitions record who did what and when. Deletions are soft, so history survives.

Verifiable documents

Generated PDFs carry a SHA-256 tamper check and a QR code anyone can use to confirm authenticity on a public page.

Segregated portal access

Client portal tokens carry a restricted ability set. A portal session can never reach team operations.

Rate-limited portal sign-in

Clients sign in with single-use email codes that expire in 15 minutes, with throttling against abuse.

Transparency

We publish the third parties that process customer data and keep our policies in plain language.

Run Your Company on Infrastructure Built for Trust

One isolated system for people, projects, and clients. Free up to 10 employees.

No credit card. Free up to 10 employees. Or contact our team for a 15 minute walkthrough.