Skip to content
Book a demo
THE TRUST CENTRE

Trust is built
in the details.

How Leadvera is hosted, how your data is stored and protected, and who can access it.

Visit the Policy centreAsk a security question

Evidence before assurance.

Everything on this page describes a control that is in place today. Leadvera does not claim independent certifications or an uptime guarantee it cannot evidence.

Transparent by design
A CLEAR PICTURE

The foundations.
And your controls.

Hosting and storage

Leadvera runs on Cloudflare Workers. Workspace records live in Cloudflare D1 and files in Cloudflare R2, both encrypted at rest by the platform and served over HTTPS.

In place

Sign-in and sessions

Passwords are stored only as salted PBKDF2 hashes. Sessions use HttpOnly, SameSite cookies with a sliding expiry, and repeated failed sign-ins are throttled.

In place

Role-based access

Five roles, from owner to viewer, are checked on the server for every request, and each workspace’s data is kept separate from every other workspace.

In place

Audit trail

Every change records who made it and when. Audit entries cannot be edited or deleted, and administrators can review and export them.

In place

Request protection

Every change requires a same-origin request with an anti-forgery (CSRF) header, and sign-in, lead intake and public forms are rate limited.

In place

AI with boundaries

AI stays off until an administrator enables it and a provider is configured. It never closes, deletes or merges records, and messages wait for approval.

In place
YOUR TEAM STAYS IN CONTROL

A dependable workflow.
AI or no AI.

Optional assistance should make the work easier. It should never become a condition for receiving, assigning or closing a lead.

Explore optional AI
1

Choose the mode

Human-first by default. Turn on only the assistance you approve.

2

Keep a named owner

Every lead has a person or visible queue accountable for its next step.

3

Recover gracefully

Provider failures return work to a human route rather than blocking progress.

DUE DILIGENCE, ORGANISED

The right documents.
In one clear place.

The policies that govern the service, ready for your legal and procurement review.

Processing responsibilities

The data processing agreement and its processing schedule.

Read the policy

Provider transparency

The providers that process data to run Leadvera.

Read the policy

Information and choices

What we collect, why, and the choices you have.

Read the policy

Responsible AI use

Human control, minimised data and fallback expectations.

Read the policy
QUESTIONS WORTH ASKING

Plain answers.
No shortcuts.

Not today. Leadvera does not claim any independent security certification or audit. This page describes the controls built into the service, and we answer security questionnaires as part of your review.

Service visibility matters too.

Check the current health of the service and its connected channels.

View service status