Encrypted connection
The public site and CRM use HTTPS.
01
Security at AgentCore
Controlled access
CRM accounts and roles control which records and actions users can reach.
Session and deployment backups
The CRM refresh cookie uses Secure, HttpOnly and SameSite=Strict attributes. Deployment database dumps have restricted file permissions.
02
Storage
The application, PostgreSQL database, Redis and application-managed file storage run on Hetzner infrastructure in Finland. PostgreSQL stores CRM records; Redis supports queues and cache. Technical logs and uploaded files are stored in application-managed storage according to the functions used. Contact form submissions are sent to the monitored Gmail mailbox, which is separate from the Finland-hosted CRM storage.
A restricted-access PostgreSQL backup is made before production API deployments. Older manual backups also exist. No automatic maximum backup lifetime is currently configured. Removing data from the live database does not immediately remove it from existing backups; the requester is informed about backup handling and any exceptions in the response.
Privacy Policy →AgentCore / Contact
Discuss access ↗Security at AgentCore
We describe only the measures currently verified for this service. Contact us for security questions relevant to your organisation.