Security & privacy
Your customer data stays yours
Built for teams that handle personal data responsibly – with the controls you need on day one and clear answers about where data goes.
A user signs in with e-mail and a 6-digit authenticator code. A request from one workspace to another workspace's data is blocked on the server, and an AI input that tries a prompt injection is flagged and blocked.
Security & privacy
Example data
EU
Hosted in the EU
The NextCRM app and all its data stores – database, file storage and search index – run on a server in Germany, in the European Union.
-
Strict workspace isolation
Every lead, file and piece of Lora knowledge belongs to exactly one workspace – enforced on the server for every request.
-
Two-factor sign-in
Sign in with Google, Microsoft or e-mail, add authenticator-app 2FA with backup codes and review active sessions.
-
Roles & permissions
Workspace Admin, Sales Manager, Marketing, Finances, and Sales Team – each sees only what the role needs.
-
Application firewall
Forms, uploads, imports, webhooks and AI inputs are screened, including protection against prompt injection.
-
GDPR tools built in
Consent checkboxes in your forms, one-click unsubscribe, STOP handling for SMS and WhatsApp and full data export.
-
Encrypted credentials
API keys, provider credentials and OAuth tokens are stored encrypted (AES-256-GCM).
-
AI that asks first
Lora's changes need a single-use confirmation; destructive actions are never confirmed by voice alone.
-
Export and deletion
Export your workspace data at any time. After a cancelled plan's paid period ends, the workspace data is deleted after 30 days.
Which providers process data
Features you enable use providers such as your AI provider, Twilio, Meta, Google, Microsoft and Stripe. Each processes only what the feature needs – the full list is in our privacy policy.
Read the privacy policyLaunching soon
Get first in line for Lora
Early sign-ups get access first. We send one e-mail when doors open – then Lora takes over your busywork from day one.