Security is architecture, not an add-on.
There is no security tier here. Roles, isolation, step-up authentication and the audit trail are the same on a Starter workspace as on a Scale one, because they are how the platform is built rather than a package sold on top of it. This page describes exactly what that means.
Four controls that carry the weight.
Access control
13 active roles, each scoped to own records, a team, a department, or the whole organization. Every route and every action carries an explicit permission, and that permission is checked on the server before a single row is returned. Hiding a button is not access control, so we do not treat it as one.
Authentication
Two-factor authentication is mandatory for privileged roles, not a setting someone forgets to turn on. Sensitive actions re-prompt for a second factor at the moment they happen: exporting a lead list, opening stored credentials, changing another user's role. A stolen session is not enough.
Tenant isolation
Every table is protected by row-level security in the database. A query issued for one workspace physically cannot return another workspace's records, because the filter lives at the data layer rather than in application code. An application bug cannot leak across agencies.
Audit trail
Reads, writes, exports and permission changes are all recorded with the actor, the target record and the timestamp. Owners and admins can answer who opened a client's file, who changed a commission rate, and who pulled the contact list, down to the minute.
Where your data lives, and how long.
Your agency holds client contact data, call recordings and revenue figures. The terms below are the ones your legal team will ask about, so they are stated plainly rather than buried.
- EU hosting
- Your workspace data is stored and processed in the European Union. Backups stay in the same region.
- Signed DPA
- A data processing agreement is available for every account, covering GDPR roles, security measures and breach notification.
- Sub-processors
- The vendors that touch your data (hosting, telephony, payments, model providers) are documented, with the purpose of each one stated.
- Retention and deletion
- Records follow a defined retention window. On request or on account closure, workspace data is deleted on a fixed timeline and removed from backups as they roll off.
- Backups
- Workspace backups are retained for 8 weeks on Starter and Growth, and 26 weeks on Scale. Restores are run by request.
Read the paperwork
The full legal terms, in the same language as this page.
See the whole company on one screen.
Choose a plan and try Openbiznis for 14 days with 100 calling minutes. Add a card before activating your real phone number.
Your selected plan starts after the trial unless cancelled. We email you three days before the first charge.