Klientele is built for service businesses that handle confidential client data — legal matters, patient information, retainer financials. Here's exactly how we protect it.
TLS on every connection, HSTS enforced. Files only through signed, expiring links. Passwords bcrypt-hashed, never logged.
Every query filtered by workspace ID. No client-side filtering, no shared queues, no cross-tenant leaks.
Roles from your industry template, editable on every plan across 136 permissions. Scope people to specific clients, projects or groups.
Agency plan: every change logged with IP, user-agent, and an integrity-hashed chain. Retention from 1 to 10 years, set by your industry.
Download a complete export of your workspace — JSON and CSV — at any time, on every plan.
No third-party certification today, and we say so. Rate limits on every public endpoint and CSRF protection on every state-changing request.
Encrypted in transit between your browser and our servers. HSTS enforced.
Every query filtered by workspace. Files reach only signed-in members or signed, expiring links.
Roles from your industry template, 136 permissions, and data scoping by client, project or group.
On the Agency plan, every change appended to a tamper-evident, hash-chained audit log.
Download your whole workspace as JSON and CSV at any time.
Every request that enters Klientele moves through these four stages. Encrypted in transit, checked against your permissions, scoped to your workspace, and — on the Agency plan — written to a tamper-evident log.
For prospects with security questionnaires, this is the long version. Bring your questionnaire to a sales call and we'll fill it in line by line.
workspace_id; no client-side filtering, no shared queues, no cross-tenant leaks.Klientele holds no third-party certification today — not SOC 2, not HIPAA, not ISO 27001. We would rather say so than imply otherwise.
What the product does give a regulated practice: roles that keep each person to the clients and work they need, a tamper-evident audit log on the Agency plan with retention set by your industry (3 years for healthcare and vet clinics, 7 for legal and accounting), and a full export of your data on every plan.
Klientele uses a small, vetted list of subprocessors. Each was selected for security posture and contracted under data-protection terms.
Material additions to this list are announced in advance to all workspace admins.
We don't yet run a formal public bug bounty programme. We do reward responsibly-disclosed vulnerabilities on a case-by-case basis (recognition, credits, or cash for critical findings). Email [email protected] with details before disclosing publicly.
Last updated October 4, 2026. © 2026 Codefree Systems & Technologies Pvt. Ltd.
Compliance teams, security architects, IT leads — talk to our team. We'll fill your questionnaire line by line.