Security: your leads, stored in the EU and under your control

Kubo CRM’s database is in Ireland, inside the European Union. That’s where your leads, their messages, their notes and their history are stored.

It isn’t the screen that hides other companies’ leads: the database itself doesn’t hand them over. Each company sees only its own.

Each person on your team signs in with their role: owner, manager or sales rep. You decide what each role can do, module by module: view or edit leads, export them, touch the integrations, the team or the settings, and view the activity log.

The owner can do everything, so nobody gets locked out of their own account. Anything that hasn’t been granted can’t be done: a module without permission is a no.

Who logged in and who failed to, who created, changed, deleted or exported, when and from which IP address. Every row is immutable: it can’t be edited or deleted.

It doesn’t store leads’ personal data, only a reference to them: so if someone asks for their data to be deleted, it can be deleted without touching the log.

• Exporting has its own permission: by default, sales reps work the leads but don’t walk away with the pipeline.
• With a limit on exports per person per hour.
• It records who exported, how many rows and which columns, without copying anyone’s data.
• Whatever a stranger types into a form doesn’t run as a formula when the CSV is opened in Excel: it’s written as text.

• Your session ends on its own after an hour of inactivity, and each company can adjust that.
• Login attempts are rate-limited: trying passwords one after another doesn’t work.
• Two-step verification with an authenticator app: each person can turn it on, and the company can require it from the whole team.
• Logging out on your computer doesn’t log you out on your phone, and vice versa.
• A deactivated account is logged out of all its devices.

• When a connection gives you a secret address to paste into another service, it’s shown only once, when it’s created, and Kubo CRM doesn’t store it in full.
• If one leaks, you replace it or reconnect, and the old one stops working right away.