Security

Security you can prove, not just claim.

SoobuCRM is built on enterprise-grade infrastructure with tenant isolation enforced at the database level — not in application code.

100%
RLS coverage
HMAC · replay-safe
Signed webhooks
Daily · encrypted
Backups
Every deploy
Migration RLS tests
Row-level security

Every table is scoped by workspace_id with policies enforced at the database level. Managers see team records; reps see only assigned records.

Encryption everywhere

TLS 1.2+ in transit and AES-256 at rest for all customer data, including backups.

Role-based access

Super-admin, admin, sales manager, sales rep, and marketing roles with granular row and column policies.

Multi-tenant isolation

Each workspace is fully isolated with automated policy audit tests that run on every deploy.

Full audit trail

Every mutation, billing event, and admin action is captured — filterable and exportable to CSV/JSON.

No prompt training

Your data is never used to train AI models. AI usage is logged with per-user quotas and rate-limits.

Compliance-ready. Automated RLS test suite verifies isolation on every migration. Billing events are signed (Stripe/Paddle HMAC) with strict event-type whitelisting and replay-safe idempotency.
Request security review

Ship on infrastructure your CISO trusts.

Every workspace ships with RLS, audit logging, and signed webhooks — from the very first user.