# Security & Trust — BM CRM

> How BM CRM protects your data: isolated workspaces, encrypted credentials, private media behind signed links, tested nightly backups, audit trails and instant kill switches.

- Pricing: https://www.bmcrm.ai/pricing
- Get started: https://www.bmcrm.ai/signup

## Built like your business depends on it

Customer conversations, contacts and deals are the most sensitive data a business has. BM CRM is built so they stay yours: isolated, encrypted, backed up nightly, auditable — and never used to train AI models.

## What you get

- **Complete workspace isolation.** Every business’s contacts, conversations and numbers live in their own workspace — isolation is enforced in the platform’s core, not by convention.
- **Credentials encrypted.** Access tokens and secrets are encrypted at rest, never shown in interfaces and never written to logs.
- **Private media.** Photos, voice notes and documents are stored privately and served only through short-lived signed links.
- **Backups that restore.** Nightly backups to independent storage with a freshness watchdog — and we test restores, because an untested backup is a hope, not a plan.
- **Every sensitive action audited.** Role changes, deletions and provider actions leave an audit trail with who did what and when — human, AI or system.
- **Instant kill switches.** Every automated subsystem — AI, broadcasts, automations — can be switched off per workspace in seconds, and off means off.

## How it works

1. **Your data stays yours.** Never used to train AI models, never shared across customers, processed only by the vendors that run the service.
2. **Deletion is yours too.** Records you delete go to a recycle bin with a retention window, then are purged — and you can export your business records any time.
3. **Humans stay in control.** The AI can never delete anything, and every automated action is labeled and reversible by your team.

## Frequently asked questions

### Is my customer data used to train AI models?

No — never. Conversations, contacts and knowledge bases are not used to train models (ours or anyone’s) and are never shared across customers.

### What happens if I want to leave?

You can export your business records at any time — your data is never locked in. Deletion follows a clear retention policy.

### Who can see provider tokens and technical secrets?

Nobody in the interface — secrets are encrypted at rest and redacted from every screen, log and audit entry.

### How are backups handled?

Automatic nightly backups to independent storage, monitored for freshness, with restores actually tested — not assumed.

---

[BM CRM](https://www.bmcrm.ai) — https://www.bmcrm.ai/security