Traffic uses TLS. Database and file storage are encrypted at rest. Each brokerage is a separate tenant. Roles limit who can see billing and team settings.
The CRM Plus is not currently SOC 2, ISO 27001, HIPAA, or PCI Level 1 certified. Report a vulnerability to thecrmplus@gmail.com.