Use roles, not shared logins

Give every person their own login with the narrowest role that lets them work. Shared logins break the audit trail and make offboarding risky.

Turn on two-factor authentication

Require 2FA for all admins at minimum. An authenticator app is stronger than SMS codes because it is not vulnerable to SIM swapping.

Offboarding a team member

Deactivate rather than delete the user so their history stays attached to records, reassign their contacts and open tasks, and rotate any API keys they created.

Data requests

Contacts can be exported or permanently deleted on request to satisfy GDPR and CCPA obligations. Contact support if you need a documented deletion record for your compliance file.