Customer data should stay controlled—even when support is helping.
ClientForge is designed around account-scoped data, authenticated access, controlled integrations and support access that ordinary support staff cannot open on demand.
Account isolation
ClientForge is a multi-tenant SaaS platform. Customer-owned data is scoped to its ClientForge account, and application services are designed to keep account context attached to reads, writes and integrations.
Authentication and roles
Users authenticate to ClientForge and operate within the roles and permissions assigned to their account. Sensitive settings and administrative actions are restricted to the appropriate account or platform roles.
Integration credentials
Sensitive provider credentials such as access tokens are handled by server-side application processes and are not intended to be exposed to ordinary users. Where the integration supports it, credentials are stored encrypted and used only for the authorized connection.
Customer-approved support access
Standard ClientForge support staff cannot automatically enter a customer's CRM. A support staff member must request access and provide a reason. The customer owner can then see a short-lived six-digit approval code inside ClientForge and may choose whether to share it with the staff member they are actively working with.
When approved, the standard support session has a defined expiry and the customer owner can revoke the session. Emergency super-admin access is a separate privileged control and is recorded through the platform audit path.
Audit and operational security
ClientForge keeps security, authentication, support and integration-event records where reasonably necessary to investigate issues, prevent abuse and maintain service integrity. Human and AI-assisted actions should remain attributable where the workflow requires traceability.
AI and connected services
AI, messaging and email integrations operate within the configuration and permissions enabled for the relevant account. Third-party providers may process information needed to perform the requested service under their own terms and data-handling commitments.
Data deletion and portability
See our Data Deletion Instructions for deletion requests and our Privacy Policy for data-handling details.
Report a security concern
If you believe you have found a security or privacy issue involving ClientForge, email connect@clientforge.in with the subject ClientForge Security Report. Please avoid including unnecessary customer data or active credentials in the initial report.