Security

What we store when you connect a tool

When you connect a tool, CCD copies the records the agents need into your workspace, so they can reason over your business even when you are not online. We copy only the record types below. We do not copy everything the tool holds.

• Google WorkspaceContacts and calendar events
• HubSpotCompanies, contacts, and deals
• SalesforceAccounts, contacts, and opportunities
• QuickBooksCustomers, invoices, and expenses
• StripeCustomers, invoices, and payments

Syncs run when someone in your workspace starts one, and on a schedule once a tool is connected. Connecting a company tool is an admin action: we record who connected it and when, and that person is its owner.

How connected data is protected

A connection's access and refresh tokens live in one of two places, and we tell you which on each connection. For tools connected directly, tokens are encrypted with AES-256-GCM under a key unique to your workspace, and those keys are themselves encrypted under a master key that never sits in the database. For tools connected through our connector runtime (Nango), the runtime holds the tokens, encrypted in its own database, and CCD only ever reads the records it has synced — never the tokens themselves. On a self-hosted install that runtime runs inside your own infrastructure. Employee records and your conversations with the agents are encrypted at rest field by field the same way.

Every workspace is isolated at the database layer with Postgres row-level security. The agents only ever see the workspace they are acting for, never another customer's knowledge graph.

What the agents can do in your tools

CCD reads from the tools you connect; it does not change records in them. Where a provider offers a read-only permission (Google, HubSpot, Stripe), that is all we ask for. QuickBooks and Salesforce only offer broad API access, so there the limit is enforced in our code instead. Only workspace admins can connect a tool. Inside CCD, anything an agent proposes that touches money, a client, or your team waits for a person to approve it. The plan is fingerprinted when it is shown to you and checked again when you approve, so what runs is exactly what you saw.

Disconnecting a tool

When an admin disconnects a tool, we revoke CCD's access with the provider, delete the stored tokens, and stop syncing. You choose what happens to the records already copied in: keep them, so your history and the decisions built on it survive, or delete everything that tool synced in the same step.

Retention, export, and deletion

Every user can download a copy of their personal data or ask for it to be deleted from their account settings. On Enterprise, admins set retention windows per module; when a window passes, the data is deleted (finance records are anonymised instead, to keep your books intact).

Audit trail

Changes made through CCD are written to an append-only audit log. Each entry is chained to the one before it with a SHA-256 hash, and nobody, including your own admins, can edit or delete entries through the app.

Your AI provider

On managed cloud, agent requests go to Anthropic, and text is turned into search embeddings by OpenAI. We do not train models on your business data. On a self-hosted install you choose: the bundled local model, or your own OpenAI or Anthropic key. Every third party that processes data on managed cloud is listed on our Subprocessors page.

Self-host & air-gap

The Community edition runs entirely on your own hardware via Docker, with a bundled local LLM. With the bundled model there are zero outbound calls, which suits air-gapped and data-resident deployments. Connectors need outbound network access to reach the tools they sync from; file import and the offline CLI do not.

Sign-in and access control

Every user can turn on two-factor authentication with an authenticator app. SSO/SAML, advanced audit logging, deep role- and attribute-based access control, and DSAR/compliance tooling are available on the Enterprise tier.

Reporting a vulnerability

Found something? Email hello@ccdsuite.com and we will respond quickly.