Security Overview

G4 CRM is built on a security-first architecture.

Encryption

All data at rest is encrypted using AES-256. Data in transit uses TLS 1.3. Encryption keys are managed through a hardware security module.

Role-based access control (RBAC) with granular permissions. Multi-factor authentication (TOTP) is available for all accounts.

All access and data modifications are logged with user identity, timestamp, IP address, and user agent. Logs are immutable and retained for 90 days.

SOC 2 Type II audited annually. GDPR compliant. ISO 27001 certified. Penetration testing conducted quarterly by independent firms.

24/7 security monitoring with automated threat detection. Incident response team available on-call. Breach notification within 48 hours.