Your team, by role
- The internal notes on the client's record
- The internal comments on tasks and tickets
- Rates, logged time and who owns each task
- Draft proposals and draft invoices
- The credentials stored in the project
Separate data, and permissions by each person's role
AgentticCRM puts three boundaries around your information. Your organization's data is kept apart from every other organization's. Inside your team, each person sees and does what their role allows. And your client signs in to a portal that shows only what you decide to share.
- No organization can query another's data
- A revoked permission stops working on the next action
- Your client sees only what you share
The Client portal screen in AgentticCRM with fictitious data, as Mateo Arias from Vértice Legal sees it. Home shows the total due, the pending proposals, the unpaid invoices and the active projects; what the organization needs from the client's side, with the overdue task marked; the next meeting, and how much of what was billed is already paid. Then, in Waiting on you, the Lightweight ERP rollout proposal is accepted and confirmed in the dialog. Last, invoice #2047 opens with its line items, how to pay and the balance, and Pay now continues to the organization's payment page.
How your data is kept apart
Each of these boundaries is checked on every request, not only at sign-in.
-
Between organizations
The database filters every row by organization. A query that does not say which organization it comes from returns nothing.
-
Your files, in your space
Every file is stored under your organization's identifier and is only downloaded after the permission check, through a link that expires within minutes.
-
Inside your team
The role decides which modules each person sees and what they can do there, in search, reports and the Assistant too.
-
Their own, or everyone's
In tasks, tickets, the inbox, the calendar, opportunities and proposals, each role can see only its own records or the whole team's.
-
With your client
Every portal login is tied to a single client and shows their proposals, invoices, projects, meetings and tickets, and nothing else.
-
Protected accounts
Passwords are stored with Argon2id, every person can turn on two-step verification, and invitation and reset links work only once.
What each person's role decides
AgentticCRM comes with five roles ready to use: Admin, Manager, Accounting, Member and Viewer. Accounting handles invoices, payments, expenses, taxes and reports without administering the team. Depending on your plan you also create your own roles, such as Sales or Support, and you add or remove specific permissions for anyone without changing their role. Reset to role takes them back to the role's permissions.
Permissions are read again on every action. If you remove a permission or deactivate an account today, it stops working on that person's next click, not the next time they sign in. Nobody can change their own role or permissions, and every change is recorded in the Activity log with who made it.
What your team sees and what your client sees
The same project looks different from each side.
Your client, in their portal
- The proposals you sent, to accept or decline
- Their invoices and their balance
- How their projects are progressing
- Their meetings and their tickets
- My account, where they change their password
Before you invite anyone, View as client opens the portal exactly as they will see it, read-only.
Questions about data and permissions
Can another organization using AgentticCRM see my data?
No. The database separates every row by organization, and a query that does not say which organization it comes from returns nothing. That protection is checked on every platform update.
Can I give people access to their own records only?
Yes, in tasks, tickets, the inbox, the calendar, opportunities and proposals: each role can see only its own records or the whole team's. Clients, projects, invoices, payments, expenses and reports are open to the whole role or not at all.
How is access to each account protected?
Each person turns on two-step verification in My profile, under Account security, with an email code, an authenticator app or a passkey, and keeps ten recovery codes. To change that setup, AgentticCRM asks them to verify again.
What happens to my other sessions if I change my password?
They all end. The same happens when you reset it with the link that arrives by email, which works once and expires soon.
Can my clients see internal notes?
No. Record notes, internal comments on tasks and tickets, rates and logged time never reach the portal. Your client sees what you share with them and nothing else.
Who can change a person's permissions?
Whoever has that permission in their role. Nobody can change their own, and every invitation, role change or permission adjustment is recorded in the Activity log with who made it.
Where you set it up, and what else to review
- Organization administrationTeam members, custom roles, per-person permissions and positions.
- Client portalThe private space where each client sees what you share with them.
- How we protect your dataThe security overview: separate data, permissions, accounts, AI and recovery.
- AI, approvals and change historyWhat AI can change with each person's permissions, and where it is reviewed.
- Backups, recovery and deletionRecovery points, how you go back to an earlier state and how deletion really happens.
- Privacy policyWhat we do with personal data, on the site and in the service.
Test the permissions with your team's roles
In a demo we set up your organization's roles with you, open the portal the way one of your clients would see it and check what each person sees.
Prefer to explore on your own? Work out your current costs, see how the Assistant works or use the CRM evaluation guide.
Create your organization online and try it for 14 days, no card required.