CrestwellBuilt to be trusted with client data.
Every firm's data is isolated, encrypted, and never shared. You review every fact find before it's finalised - nothing leaves your desk unchecked.
Per-firm data isolation
Row-level security means each user sees only their own clients and cases within their firm - never anyone else's.
Encrypted in transit and at rest
Encrypted in transit (TLS) and at rest by our infrastructure providers.
Adviser review before finalise
The AI drafts, a broker approves - never an automated decision. Nothing is finalised without a human reviewing it first.
Owner and member roles
Every account has owner and member roles, so you decide who can do what within your firm.
Data residency
Client records, documents and transcripts are stored in the EU (Ireland), with UK data-transfer safeguards for AI drafting.
Retention & deletion
Uploaded documents are removed automatically once extraction completes, and meeting audio is deleted after transcription by default.
Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & document storage | EU - Ireland |
| Anthropic | AI drafting - never trains on your data | US - UK transfer safeguards |
| Deepgram | Meeting transcription - opted out of model training | US - transient, no training |
| Resend | Transactional & outreach email | EU - Ireland |
| Vercel | Application hosting | UK - London |
| Inngest | Background-job orchestration - job metadata only, never client content | US - metadata only |
Your data is never used to train AI models - our providers process it under commercial terms that prohibit it. The current, complete sub-processor register is maintained in our Privacy Policy.