What we do to keep your book yours.

Every workspace is separated by Postgres row-level security as a second lock behind the app's own scoping. Production refuses to start on a database role that could bypass it.

Two-factor sign-in (TOTP), 'Sign out everywhere', roles (Owner, Manager, Agent, Read-only), invites that expire.

An audit log of every change that can't be edited, exportable to CSV.

growthforceos.com/app/owner/audit

A lead who opts out can't be called or messaged by mistake.

Integration secrets are encrypted at rest. Each lead source posts to its own private URL, and switching the source off stops it accepting leads at once. Message and call webhooks are checked against a signing secret you can rotate.

growthforceos.com/app/owner/integrations

Export any time. Deletion requests: data deletion in our privacy policy.

We don't hold SOC 2 or ISO 27001. If your procurement team needs a questionnaire answered, we'll answer it.