What Crestwell works with.
What it connects to today, what each connection actually does, and where each one stops. The list of what it does not connect to yet is on the same page, because you would find out anyway.
Connected today
Every case filed into your firm's own Box account, in a folder structure your firm can read without being taught it.
- An owner or admin connects the firm's Box account once, from Settings, then Integrations. It is not a member-seat decision, because connecting grants write access to the firm's document store.
- Crestwell creates a folder called Crestwell Client Files at the top of your account, and one folder per client inside it. Each client folder carries a six-character reference, so two clients genuinely called John Smith get two folders rather than quietly sharing one.
- Inside every client folder are the same eleven folders: fact find, ID and verification, income and employment, bank statements, credit and liabilities, property and valuation, illustrations and ESIS, suitability and advice, correspondence, meeting notes, compliance. Each document is filed into the one it belongs in.
- Cases you already have are picked up along with the new ones. Nothing is filed by hand and there is no button to press.
Where it stops: Built to Box's documented contract, and not yet run against the live Box API. The first firm to connect is where the request and response shapes get confirmed, and we would rather tell you that now than have you find it on the day. Separately, your own Box administrator may need to approve Crestwell for your enterprise before a broker can authorise it — that is a setting on your side, not ours.
Every case filed into your firm's own Google Drive, in the same folder structure as Box.
- An owner or admin connects the firm's Google Drive once, from Settings, then Integrations. A firm files into one document store at a time.
- Crestwell creates a folder called Crestwell Client Files, one folder per client inside it with the same eleven folders as Box, and files each document into the one it belongs in. Filing runs every hour, and cases you already have are picked up along with the new ones.
- Crestwell can see only the folders and files it creates in your Drive. Nothing else in it is read.
- Disconnecting stops the filing and deletes Crestwell's access. What was already filed stays in your Drive, because it is your firm's copy.
Where it stops: Built to Google's documented Drive API and not yet run against a firm's live account, so the first firm to connect is where it is confirmed. Google has also not yet verified Crestwell's access: until it does, connecting shows Google's warning that the app is unverified, and only firms we have added can connect.
Your Crestwell appointments in your own Google Calendar, and your Google events beside them in Crestwell.
- Each adviser connects their own Google Calendar, from Settings, then Integrations. It reaches only the calendars of the Google account that signed in.
- Book, move or cancel an appointment in Crestwell and the same happens in your Google Calendar. The entry carries the appointment type, the client's initial and surname, the time and the location you typed. Your notes, the client's full details and any link back to their case are never sent.
- Your Google events show beside your Crestwell appointments, read when you open the calendar and never stored. A meeting with one of your clients shows under that client, and you can link any other event to a client yourself.
- Meetings with a call link or guests appear on Meetings, ready to record.
Where it stops: Writing goes one way: changing an event in Google Calendar does not change the Crestwell appointment. Google has not yet verified Crestwell's access, so until it does, connecting shows Google's warning that the app is unverified and only firms we have added can connect. Outlook is not connected yet.
Your recent Gmail in the Crestwell inbox, beside portal messages and colleague chats, with replies and new email sent from your own address.
- Each adviser connects their own Gmail, from Settings, then Integrations. It reaches only the mailbox of the Google account that signed in, and nobody else at the firm sees it.
- The Crestwell inbox shows the 50 most recent threads in your Inbox and Sent folder, read from Gmail while you have Crestwell open, so the inbox is ready when you go to it, and discarded. Nothing from the mailbox is stored unless you file an attachment to a client: no thread, message or address lands in a Crestwell table or log.
- A thread from one of your clients shows under that client. The addresses on it are compared with your clients' email addresses on our server, in your own session, so it sees only the clients you can.
- Reply, or write a new email, from the inbox. It goes out from your Gmail address and lands in Gmail's Sent folder, which is the record of it. The only other thing Crestwell changes in the mailbox is marking a thread read when you open it.
- Attachments open as a download, relayed from Gmail through our server when you ask, up to 25 MB. On a thread from one of your clients, one click files an attachment to that client's documents instead, through the same checks as any upload: the virus scan, the file-type check and the document read.
Where it stops: Email is plain text, with no attachments on anything you send; to send a document, use your mail app. Nothing is deleted, archived or moved — Gmail's permission would allow moving mail to the bin, and Crestwell never does. A plain download of an attachment is not checked by Crestwell's scanner and is not filed to the client; filing it is the route that checks it. There is no search of the mailbox: the inbox filters the 50 threads it has read. Coming soon: Google has not yet approved Crestwell for Gmail, whose permission Google classes as restricted, so the Gmail card in Settings says Coming soon and brokers cannot connect it yet.
Your recent Outlook email in the Crestwell inbox, read from Microsoft while you have Crestwell open and never stored, with replies sent from your own address.
- Each adviser connects their own Outlook mailbox, from Settings, then Integrations. It reaches only the mailbox of the Microsoft account that signed in.
- The same inbox as Gmail: the 50 most recent threads in your Inbox and Sent Items, read live and discarded, threads from your clients shown under them, replies and new email sent from your address into Sent Items, and a thread marked read when you open it.
- Attachments open as a download, relayed from Microsoft through our server when you ask, up to 25 MB, or filed to the thread's client with one click, through the same checks as any upload.
Where it stops: Not connectable yet: Crestwell has not registered with Microsoft for mail, so the Outlook card's Connect says it isn't ready to connect just yet. Separately from the calendar, on purpose, so a calendar connection can never reach a mailbox. When it is, the same limits as Gmail apply — plain text, no attachments on send, nothing deleted or moved, downloads unscanned and unfiled unless you file them, no mailbox search — and disconnecting deletes Crestwell's access on our side only, because Microsoft gives us no way to withdraw it: remove Crestwell in your Microsoft account's app permissions to revoke it completely.
Forward a client's email from whatever mail client you already have, and its attachments file themselves against that client.
- Every client gets one private intake address. Forward the email you already received to it, and the attachments are read, classified and filed against that client.
- There is nothing to install and no mailbox to connect. Outlook, Gmail, Apple Mail — anything that can forward an email works, because forwarding an email is all it is.
- The sender is checked as well as the address. Mail from a firm member or from the client themselves is filed straight away; anything else is held for you to accept or discard.
- Mail that did not pass SPF, DKIM or DMARC for the domain in its From address is held too, so a stranger can't file a document by putting your client's address in From. So is mail where the receiving provider told us nothing about those checks — "we do not know" and "it failed" carry the same risk here.
Where it stops: The address is one of two checks, not a password. It travels in cleartext through every mail server on its path and is trivially forwarded, so knowing one is deliberately not enough to put a document into a regulated file. Anything uncertain waits for your approval rather than being filed.
Details of the property and of a limited-company applicant, suggested from the registers that already hold them.
- Companies House answers what a lender asks about a self-employed or director applicant: does the company exist, is it active, and how long has it been trading.
- The EPC register carries what the fact find asks about the security property and the client usually does not know — property type, floor area, heating.
- HM Land Registry's price paid data gives what the property last sold for, as context for a remortgage valuation or a sanity check on a declared purchase price.
- A postcode lookup checks the postcode exists, and gives the district and country, before the other three registers are queried with it.
- Each source is independently optional. A missing key, a timeout or no match produces nothing at all rather than an error, and the result is simply thinner.
Where it stops: Everything a register returns is a suggestion. It fills only fields that are still empty and never overwrites a value you or the AI already put there. Two coverage limits worth knowing before you rely on them: the EPC and Land Registry data are England and Wales only, so a Scottish or Northern Irish postcode returns no match rather than a wrong one; and a past sale price is not a valuation, so it fills nothing automatically and is shown to you as context. The postcode lookup is also not address autocomplete — a full UK address file is licensed, and we do not hold one.
Subscriptions, payments, invoices and receipts run on Stripe.
- Checkout happens on Stripe's own hosted page. Payment details go to Stripe and never reach Crestwell.
- Plan changes, invoices and receipts are Stripe's, so they arrive in the format your bookkeeper already recognises.
Where it stops: Stripe receives the firm owner's email address so it can bill you, and nothing else. No client data goes to it — not a name, not a document, not a case. It is on our sub-processor register for the billing relationship alone.
Send a case's documents or a meeting recording; get back a structured fact find, transcript, suitability letter, file note or Consumer Duty analysis. For platforms with their own interface.
- JSON over HTTPS, authenticated with a bearer key you generate yourself in the partner console and which we store only as a hash.
- Request signed upload URLs, put the files, start a job, then take the result from a signed webhook or by polling — whichever fits your stack. Each result can also be fetched as a PDF.
- Live today: document extraction, meeting transcription, document classification, case file checks, indicative affordability, property and company enrichment, suitability letters, file notes, Consumer Duty and protection gap analysis, and redrafting a single section.
- Test keys are free, outside the daily job limit, and return a stable sample fact find without running the AI, so a whole integration can be built and tested in CI before a single live job is billed.
- Uploaded files are deleted from storage as soon as each job finishes, whether it succeeded or failed; anything an interrupted job leaves behind is swept within about two hours, or five for audio. Results stay available for 30 days and are then erased, or straight away when you delete the job.
Where it stops: Illustration (ESIS) extraction is not released yet. Each key is limited to 500 requests an hour, and each account to 50 live jobs a day. The full reference is published as an OpenAPI document.
Not yet
Things a broker reasonably expects and will not find. No dates against any of them: a date here would be a commitment made to someone we have not met, about work whose order changes as we learn what firms actually need.
- Sourcing systems
- A one-click fact-find export in the shape Twenty7tec and Mortgage Brain accept, so a case does not get re-keyed on its way to sourcing. Today you would re-key it.
- Lender affordability
- Mortgage Broker Tools' affordability API, run straight off a fact find the broker never re-typed. The transport and the mapping are written; nothing in the product calls them and we hold no production credentials, so it is not something you can use. Crestwell's own affordability figure today is indicative arithmetic from the case, not a lender result.
- Two-way calendar sync, and Outlook
- An edit in your own calendar changing the Crestwell appointment, and Outlook alongside Google. Today Crestwell writes your appointments into Google Calendar and shows your Google events beside them, but a change made in Google Calendar stays there, and Outlook is not connected.
- Electronic ID and AML checks
- An identity check whose result fills the fact find's ID section. Today the ID documents a client sends are read like any other document, and the check itself happens wherever your firm already does it.
- Open banking
- A bank feed into the budget, rather than statements read as documents. Today the budget is built from the statements the client sends.
Using something that is not on this page? Tell us what it is and what you need to move between it and Crestwell — email hello@crestwell.uk. What founding firms already run is how this list gets ordered.