Security
Putting it all in one place raises the stakes.
Consolidation is only a good idea if the thing you consolidate into can be trusted with payroll, contracts and customer records. Here is exactly how Creews holds them.
Role & feature permissions
Access is decided by role, team membership and per-resource sharing — down to the individual record. Finance stays finance-only unless you say otherwise.
Account-scoped data
Workspace records use UUIDs and every tenant-scoped lookup is constrained to the active account.
Scoped integration credentials
Connected services use workspace-scoped credentials and follow the same permission model.
Audit trail
Assistant runs, tool calls and human approvals are recorded for review.
Separated application storage
Records remain structured and attachments are stored separately from application compute.
Backups & recovery
Database replication and automated backups support recovery. Ask us for the current operational detail during review.
Controls in the product today.
We list implemented controls here and do not present independent certifications we have not earned.
ControlStatusImplementation
Role-based accessActiveWorkspace and feature permissions
Account data isolationActiveTenant-scoped records
Passwordless authenticationActiveExpiring magic codes
Assistant approval gateActiveHuman approval and run history
Encryption in transitActiveTLS at the edge
Independent certificationsNot claimedAsk for current review materials
Sub-processors
Every third party that touches workspace data, what it is used for, and where it runs. Kept current, with notice before anything is added.
Hetznerapplication compute
Cloudflareobject storage · agent runtime
Postmarktransactional email
OpenRoutermodel routing when Assistant is enabled
The Assistant and your data
The question every buyer asks, answered before they have to ask it.
It sees only what the asker can see
Permissions are applied before retrieval, not filtered afterwards.
Provider-aware model access
Model access is routed through the provider configured for the workspace; provider terms apply to that traffic.
External actions need a person
Nothing leaves the workspace without an approval, and the approval is logged.
It can be switched off
Workspace-wide or per role, at any time.
Doing a security review?
Ask for current architecture notes, the processor list and answers to your security questionnaire.
The operating workspace for small and growing businesses.
Product
Solutions
Resources
Company