# Security & Trust | BM CRM

> How BM CRM protects your business data: workspace isolation, encrypted secrets, full audit trails, restore-tested backups, and exports that keep your data yours.

- Pricing: https://www.bmcrm.ai/pricing
- Get started: https://www.bmcrm.ai/signup

## Built like your business depends on it

Customer conversations, contacts and deals are the most sensitive data a business has. BM CRM is built so they stay yours: isolated, encrypted, backed up nightly, auditable, and never used to train AI models.

## What you get

- **Complete workspace isolation.** Every business’s contacts, conversations and numbers live in their own workspace, isolation is enforced in the platform’s core, not by convention.
- **Credentials encrypted.** Access tokens and secrets are encrypted at rest, never shown in interfaces and never written to logs.
- **Private media.** Photos, voice notes and documents are stored privately and served only through short-lived signed links.
- **Backups that restore.** Nightly backups to independent storage with a freshness watchdog, and we test restores, because an untested backup is a hope, not a plan.
- **Every sensitive action audited.** Role changes, deletions and provider actions leave an audit trail with who did what and when, human, AI or system.
- **Instant kill switches.** Every automated subsystem, AI, broadcasts, automations, can be switched off per workspace in seconds, and off means off.

## How it works

1. **Your data stays yours.** Never used to train AI models, never shared across customers, processed only by the vendors that run the service.
2. **Deletion is yours too.** Records you delete go to a recycle bin with a retention window, then are purged, and you can export your business records any time.
3. **Humans stay in control.** The AI can never delete anything, and every automated action is labeled and reversible by your team.

## Frequently asked questions

### Is my customer data used to train AI models?

No, never. Conversations, contacts and knowledge bases are not used to train models (ours or anyone’s) and are never shared across customers.

### What happens if I want to leave?

You can export your business records at any time, your data is never locked in. Deletion follows a clear retention policy.

### Who can see provider tokens and technical secrets?

Nobody in the interface, secrets are encrypted at rest and redacted from every screen, log and audit entry.

### How are backups handled?

Automatic nightly backups to independent storage, monitored for freshness, with restores actually tested, not assumed.

---

[BM CRM](https://www.bmcrm.ai), https://www.bmcrm.ai/es/security