Role-based access, decisions with a second person, a trail of every change.
Customer data is the most sensitive part of sales. That is why NG CRM does not rely on a single check: sign-in, role, data scope, limits, segregation of duties and database-level isolation work together.
- OAuth 2.1 + OIDC
- TOTP
- 6 authorization layers
- EU server
Layers of protection
We describe how the system is built. We do not claim certifications, because we do not hold any.
- Available
Modern-standard sign-in
Built-in OAuth 2.1 and OpenID Connect with PKCE. Two-factor sign-in (TOTP) is enabled in the profile and is mandatory for that user from then on.
- Available
Six authorization layers
Roles and privileges, data scope, approval limits, segregation of duties, maker-checker and delegations. Any layer can refuse an action.
- Available
Database-level isolation
Row-level security in the database separates companies, and an additional restrictive policy separates legal entities within a company.
- Available
Protected sensitive fields
A contact’s mobile phone and consent basis are visible only to users with the privilege to view sensitive fields.
- Available
A full trail
An append-only settings trail (roles, users, approval flows), sign-in history, AI trail, API call log, and webhook delivery, import and export logs.
- Available
A brake on password guessing
Temporary account lockout and a limit on attempts per IP address.
- Available
Secrets are never returned
Integration secrets are encrypted. An API key secret is shown only once; only its fingerprint is stored.
- Available
EU server and nightly backups
Production runs on a server in the European Union. Backups are taken every night, with a copy off the server. Attachments go through an antivirus check.
- Available
Ten system roles
From sales rep and sales manager to approver, analyst, security officer and auditor, with a privilege matrix you can change in bulk and audit per cell.
All capabilities listed are part of NG CRM. Anything that depends on your external accounts, such as a Microsoft 365 or Google calendar, is enabled during onboarding.
What this looks like at work
Sales reps see their own
Data scope by owner and team decides which customers and deals someone sees. Managers see the team; auditors read but do not change.
Big decisions take two signatures
Approval limits and maker-checker mean that whoever proposes cannot approve alone — neither a person nor Copilot.
Documents do not leave your server
Word templates are converted to PDF on the system’s own server, without internet access — quotes and contracts do not go to external conversion services.
Frequently asked questions
Where is data stored?
On a server in the European Union. Backups are taken every night and copied off the server.
Is two-factor sign-in mandatory?
A user enables it in their profile, and from then on it is mandatory for that account. The initial administrator must enable it.
Can one legal entity in a company see another’s data?
Not unless it is allowed. In addition to role-based rights, the database has a restrictive policy per legal entity, so data is separated at row level too.
Does NG CRM have ISO or SOC 2 certification?
No. We describe how the system is protected — sign-in, authorization layers, isolation and audit trail — but we do not claim certifications we do not have.
Related
- NG CopilotAnswers with a source. Writes only when you confirm — and sensitive actions need a second person.
- Integrations and APIA public API, signed webhooks and official registers — no separate “partner” API.
- InboxE-mail, Viber and website chat — every conversation tied to a customer and one owner.
- AI3 min read
An AI assistant that writes nothing without your confirmation
By default NG Copilot only reads and answers. When it may propose actions, every write goes through a card, a confirmation and, for sensitive steps, a colleague's approval.
Want to see how this looks in NG CRM?
We will show you in a demo, on examples from your own sales. No obligation.
- office@konissoftware.com
- Phone
- +381 66 000 977