Nutshell CRM Security: SOC 2 Certified Data Protection
SOC 2 Certified Data Protection
Important information for your CRM cybersecurity team
Looking for more detailed information about how Nutshell keeps your business and customer data safe? If you’re on your company’s data or cybersecurity team, a network administrator, or a CRM manager, the following Nutshell data security information may be helpful to you.
Network security
Our engineering team has experience managing petabytes of data securely and durably. We take the following steps to keep your data secure at rest and as it transits networks.
- Firewalls, VPNs, modern Linux operating systems, conservative network and security group configuration
- Encryption at rest
- VPNs to secure employee access and encrypt all data that transits Internet links
- Nutshell passwords are salted and one-way hashed. Our staff cannot access or see your password
- Login pages are protected against brute-force attacks
- We follow industry security lists and promptly patch critical issues (we patched Heartbleed within hours)
- We use a multi-tenant data storage architecture. Customer data is stored in discrete silos per account to isolate and protect your data
Operational security
Our support team is based in-house with our Ann Arbor engineering team. We will only access your account with your permission to troubleshoot support issues. Staff will never ask for your Nutshell password.
- All staff computers run with full-disk encryption and strong passwords
- We limit our internal network’s exposure to Windows
- Every Nutshell employee receives a copy of 1Password on their first day
- Offices are secured with individual keycard access
Financial security
We ensure that any credit card and billing information related to your Nutshell account is stored securely. Our billing provider is PCI-compliant and managed separately from Nutshell application systems.
Password protection
Nutshell uses one-way hashing to securely store a representation of your password. We cannot retrieve your password for you—you must use our forgotten password tool in conjunction with your email address to recover your password. As a result, it’s important to note that keeping your Nutshell email address information up-to-date is your responsibility.
The onus of choosing secure passwords also lies in your hands to ensure your passwords are kept safe and that access to your account is protected. Nutshell can’t be held responsible for compromised data due to an insecure or stolen user password. If you make use of third-party authentication, such as through Google Apps, those passwords will also need to be secured.
Nutshell also supports SAML-based SSO and DS for Sales Enterprise customers, enabling your team to log into Nutshell with one set of credentials managed by your IT team. Learn more about SSO and DS in Nutshell.
Responsible disclosure
If you’re a security researcher or you believe you’ve encountered a problem in Nutshell’s security, we urge you to review the following notes:
- Nutshell does not offer a bug bounty program to pay for reports.
- Please report any security concerns to security@nutshell.com. If you need to send an encrypted message, you can find it on Keybase.
- We ask that you give us a reasonable amount of time to respond to reports before making information public.
- Please do not conduct any security research that could result in the destruction of data and interruption or degradation of service. This includes the use of automated tools or scanners—these are likely to result in your IP address being banned.
- We don’t accept responsible disclosure reports related to the following issues:
- Iframe/UI redress issues related to X-Frame-Options headers
- HSTS implementation
- User-provided password strength
- SPF, DKIM, and DMARC configuration issues
- User enumeration issues (we utilize rate limiting to protect our users)
- The presence of banner or version information
CRM features that boost your sales effectiveness
Sales automation
Put time-wasting tasks on autopilot so your team can focus on building relationships and nurturing leads through your sales pipeline.
Pipeline management
Create custom pipelines and manage them easily with multiple views to nurture leads efficiently and stay on top of every deal.
Reporting & analytics
Provides robust reporting and analytics to help you track your team’s performance and to help you gain quick insights with automated reporting.
Calls & meetings
One-click calling, AI call summaries, AI next steps, and easy scheduling.
Email automation
Increase sales efficiency with Nutshell’s powerful email automation tool. Create personalized campaigns & track success right in your CRM
Artificial intelligence
Streamline daily processes using the generative power of AI in Nutshell to simplify sales activities and open up a world of possibilities.
Meeting scheduler
Create and manage virtual meetings and sync the information with your Calendar without leaving your CRM.
Proposals & Invoices
Quickly create, send, track, and get signatures on custom quotes, invoices, and contracts directly from Nutshell.
Team collaboration
Store customer notes, interactions and easily bring colleagues into the conversation and stay notified of everything that needs your attention.
AI agents
Easily accelerate revenue-driving tasks in your CRM, so you and your team can spend more time on selling.
Contact management
Improve calendar, email, & contact organization from any source with Nutshell’s contact management software.
Product Importer
Quickly import your entire products and services list with Nutshell’s Product Importer, so you and your team can spend less time on administration and more time on selling.
Prospecting
Search through over 200 million contacts, add ideal customers to your CRM, and connect with your future buyers.
Website visitor identification
Pinpoint the companies and individuals visiting your site so you can proactively target warm leads.
Contact enrichment
Locate specific individuals working at the companies in your book of business and reveal their contact information so you can start the conversation.
Lead attribution
With channel and source data automatically added to your new leads, you can know where your best leads come from and invest smarter in your marketing.
Free customer support
Connect with our world-class support team to get fast, friendly, and free support when needed.
Email and calendar sync
Easily sync your email and calendar with Nutshell to make your CRM work where you do.
Security
We take the security and reliability of your data seriously. We partner with the industry’s most trusted infrastructure provider, Amazon Web Services.
App Marketplace
Integrate Nutshell with the rest of your tech stack
See all of Nutshell’s features
Discover the broad spectrum of features and tools available to Nutshell customers
CRM data security FAQs
1. What is data security in CRM?
Data security describes a process that involves several components and actions to keep your CRM data secure and private. The process protects data against unauthorized third-party access, malicious cyber attacks, and the exploitation of your contact, business, and financial data.
2. Why is CRM data security essential?
CRM data security is essential for several reasons, one of which is that any organization that stores and processes private and sensitive customer data is legally obligated to protect it from unauthorized access or loss. Effective CRM cybersecurity ensures your contact data and business information stay safe and secure.
3. What are the key components of a secure and reliable CRM system?
There are several security components your CRM provider should provide, including (but not limited to):
Data encryption
Malware protection
Data management
Data auditing tools
Data reporting tools
Consent management
Password protection
Compliance with data privacy standards
Transparency regarding how stored and processed data is protected
4. Do you encrypt data at rest?
Yes, data stored in Nutshell is encrypted at rest via controls in our AWS infrastructure.
5. Where are your servers located?
Nutshell’s infrastructure is fully located in the United States on the AWS platform.
6. Do you support Single Sign-On (SSO)?
Yes, Nutshell supports SSO on Google, Microsoft and SAML/SCIM in our Enterprise tier.