Enterprise-grade security, verified by auditors.

You retain all ownership rights, title, and interest in your content. Huscribe does not claim ownership over it, and connecting a CRM does not change who owns what is inside it.

Project deliverables and usage rights for any workflow change are set out in the agreement, and the source, tests, documentation and deployment manifest are delivered into a repository you control.

TLS 1.3 in transit and AES-256 at rest. That covers the conversations your team captures on the way to Huscribe and the structured records Huscribe holds.

Your storage region is agreed at onboarding, so your review team knows where the data sits before anyone connects an account.

Retention and deletion controls are documented, and the published retention and deletion policy sets the windows that apply to your workspace.

When an account is deleted, the deletion propagates across active application data stores in line with that policy. The policy itself is part of the documentation pack your review team receives.

When we prepare a workflow change, production discovery uses a dedicated identity you approve, through a service restricted to retrieval and scoped to the workflow we agreed. It reads. It changes nothing.

Building and testing happen on a separate sandbox connection, so the work never shares an identity with your live system.

We do not deploy to production. Your authorised release team decides whether and when a change goes live, through your own release process and tooling.

That boundary does not move, and it sits in the agreement rather than only on this page.

You can edit or reject proposed CRM updates before they are committed, on every capture route except meeting notes, which are written automatically and can be undone afterwards.

Extracted information carries its source and date, and inferences are labelled rather than presented as sourced facts, so a reviewer can see where anything came from.

Requirements, approvals, tests, versions and release evidence are recorded and available to you. Every item traces back to the requirement you approved.

Admin-controlled invitations and access, manager visibility aligned to the team structure, Microsoft and Google sign-in, and supported connections managed from one workspace.

DPA, subprocessor list, retention, and deletion details, available during security review, alongside the SOC 2 Type II report under NDA and the ISO/IEC 27001:2022 certificate.