Security and data protection
Protecting the customer data your team works with every day.
Mandatory two-factor login, workspace-scoped access, established cloud infrastructure and data-control tools — included for every Kustmr workspace.
Security controls are included for every licensed user.
Security at a glance.
Core protections built into the product — not reserved for a higher plan.
- Mandatory 2FA login
- Workspace-scoped access
- Owner, admin & member roles
- Regular backups
- Data export & deletion
- Controlled infrastructure access
Account security
Account access requires two steps.
Kustmr uses email and password together with a time-limited verification code sent to the account email before a session is established.
Two-factor login verification is mandatory for every user — not an optional add-on.
- Email verification code at login
- Time-limited challenges
- Account setup flow
- Password reset flow
- Session cookies
- Removed users blocked
Workspace access
Customer data stays in the correct workspace.
Authenticated requests are scoped to the user's workspace so customer, sales and project information loads within the correct business context.
Owner, admin and member roles control selected administrative actions. Removed team members are blocked from authenticating.
- Workspace-scoped requests
- Role-based admin actions
- Licensed access controls
- Team managed by owners
Data control
Keep control of your business data.
Export supported core business records when you need a copy outside Kustmr.
Permanently delete supported records from the workspace when information should no longer be retained.
- Export companies & contacts
- Export deals & projects
- Delete supported records
- Permanent removal from workspace
Infrastructure
Established services, operated with controlled access.
Kustmr uses established cloud infrastructure for web delivery, application services, database and storage. Production systems are managed through controlled administrative access. Regular backups support operating and maintaining the service.
- Vercel
- Public web delivery and hosting.
- Render
- Application services and scheduled jobs.
- Supabase
- Database and selected storage.
Clear security claims instead of vague promises.
Kustmr only publishes security claims supported by current product and operating practices. Certifications, storage regions, encryption standards and uptime guarantees are not published until formally verified.
Start with mandatory two-factor access and the complete Kustmr product.
Use every feature free for 14 days. No credit card required.
FAQ
Security questions
Clear answers about account access, workspace separation, infrastructure, backups and data control.
Is two-factor authentication required?
Yes. Kustmr requires email-based two-factor login verification before an authenticated session is established.
Does Kustmr support authenticator apps or security keys?
Not currently. Kustmr currently uses a time-limited verification code sent to the user’s account email.
Which infrastructure providers does Kustmr use?
Kustmr currently uses Vercel for web delivery, Render for application services and Supabase for database and selected storage infrastructure.
Is customer data separated by workspace?
Yes. Authenticated application requests are scoped to the user’s workspace so business data is loaded within the correct workspace context.
Does every user have the same permissions?
No. Kustmr uses owner, admin and member roles to control selected administrative actions. Kustmr does not currently offer a fully customizable enterprise permission system.
What happens when a team member is removed?
A removed team member is blocked from authenticating to the workspace.
Can we export our data?
Yes. Kustmr supports export of companies, contacts, deals and projects when needed.
Can we permanently delete information?
Yes. Supported companies, contacts, deals, projects, tasks and time entries can be permanently deleted from the workspace.
Does Kustmr use backups?
Yes. Regular backups are part of operating the service. Kustmr does not publish a specific backup frequency or retention period until those details are formally documented.
Is Kustmr SOC 2 or ISO certified?
Kustmr does not currently claim SOC 2 or ISO certification.
Does Kustmr publish a data-storage region or uptime guarantee?
Not currently. Kustmr does not publish a specific storage-region or uptime claim until the current configuration and supporting documentation are formally verified.
How can we ask a security or data-protection question?
Email support@kustmr.com with your question. The Kustmr team will respond in writing based on the product and operating practices currently in place.
Still have questions? Contact us at support@kustmr.com.