☁
Secure infrastructure
Hosted on enterprise-grade infrastructure with resilient data-centre operations.
Security and data protection
Enterprise-grade security.
Protecting your data. Protecting your clients.
Adviser CRM is built on a foundation of security, compliance and reliability, so you can focus on what matters most — your clients.
✓
TLS 1.2+Encrypted in transit
□
AES-256Encrypted at rest
◉
24/7 MonitoringAlways-on protection
Your client data is protected by enterprise-grade infrastructure and industry-leading security practices.
Built on a secure foundation
We combine world-class infrastructure, strong security controls and vigilant monitoring to help keep your data safe.
◇
Data encryption
Data is encrypted in transit and at rest using established industry protocols.
▱
Regular backups
Scheduled backups, replication and recovery controls support business continuity.
♙
Access control
Role-based permissions and authentication controls help restrict access to authorised users.
◉
24/7 monitoring
Proactive infrastructure and network monitoring helps identify threats and availability issues.
✓
Secure development
Security is built into development, testing, change management and continuous improvement.
⬡
Secure network
Layered firewalls, segmentation and vulnerability management strengthen platform protection.
Independently assessed.
Globally recognised.
International standards support information security and service management.
ISO
ISO/IEC 27001Information Security Management
SOC
SOC 2 Type IISecurity, availability and confidentiality controls
Our security operations
Layered operational controls support continuous protection across infrastructure, access, development and recovery.
- Real-time threat detection and response
- Continuous system and network monitoring
- Incident management and escalation
- Regular testing and vulnerability scanning
- Documented security policies and procedures
✓
Security is not just a feature — it’s our commitment.
We are committed to protecting your data and your clients’ trust, every single day.
Encryption
Protected while moving and while stored.
Strong encryption protocols help protect information across web access, APIs and platform storage.
Connections use modern Transport Layer Security, strong ciphers, HTTPS enforcement and Perfect Forward Secrecy.
Sensitive customer data at rest is encrypted using the Advanced Encryption Standard, with controlled key management.
The technical detail
How the platform protects your information.
Open each section for a concise explanation of the safeguards supporting Adviser CRM.
Data centres and physical security+
Zoho operates data centres across multiple regions. Facilities use restricted personnel access, approval processes, access logging, surveillance and physical safeguards such as power redundancy, cooling and fire prevention.
Adviser CRM accounts are hosted within the applicable Zoho data-centre environment. Platform documentation identifies primary and secondary facilities to provide redundancy.
Network security and monitoring+
Layered network controls include firewalls, segmented environments, monitoring, change reviews and a dedicated Network Operations Centre. Development and testing systems are separated from production infrastructure.
DDoS mitigation, intrusion detection, rate limiting and filtering help protect service availability and identify suspicious activity.
Application security+
Secure development practices include authorised change management, secure coding guidance, automated analysis, vulnerability scanning and manual review. Application-layer controls are designed to mitigate common threats such as SQL injection and cross-site scripting.
Backups and disaster recovery+
The underlying platform uses scheduled backups, encrypted backup storage, data replication and resilient storage. Primary and secondary data-centre arrangements support continuity if infrastructure becomes unavailable.
We also recommend that customers periodically export their Adviser CRM data and retain their own business continuity copy.
Malware, spam and abuse protection+
Automated scanning, threat intelligence and detection systems help identify malicious files and abusive activity. Email services use authentication mechanisms including SPF, DKIM and DMARC where applicable.
Incident management and notification+
Security incidents are investigated, tracked and closed with corrective action. Where an incident affects a customer, relevant information and recommended actions are communicated through the appropriate channel.
Security concerns reported to support@advisercrm.co.nz are treated as a priority.
Data retention and disposal+
Service data is retained while an Adviser CRM account remains active and is subsequently removed according to the applicable account, backup and platform retention processes. Storage devices that reach end of life are securely erased or physically destroyed through controlled disposal procedures.
Shared responsibility
We protect the platform. You control your users.
Security works best when strong infrastructure is paired with good practices inside each advice business.
01Use unique accounts for every team member.
02Enable multi-factor authentication wherever available.
03Review permissions when roles or responsibilities change.
04Export and retain business continuity copies of key data.
Questions about security?
Talk to us about how Adviser CRM protects your business.
We are happy to discuss the platform, data handling and the controls available to your organisation.