Infrastructure
Reliable Cloud Platform
A secure, high-performance platform with global redundancy.
- Encryption at rest & in transit
- 16 global storage locations
- 99.9% uptime
Trust & Security
Built on trust.
Secured at every layer.
Followup CRM helps construction teams manage bids, projects,
and relationships with confidence — backed by enterprise-grade
security, continuous compliance, and controls that put you in
charge of your data.
Uptime
99.9%
Storage Locations
16
Monitoring
24/7
Encryption
AES-256
Protect your organization
Three pillars of protection
From infrastructure to access controls, see how Followup CRM safeguards your
data so your team can focus on winning more work.
Access & Authentication
Multi-Factor Authentication
SSO, role-based permissions, and email-based MFA keep the wrong people out.
- ✓ 6-digit email code at login
- ✓ Company-wide or individual opt-in
- ✓ Works alongside SSO
Compliance
Privacy & Certifications
Independently assessed controls and global privacy alignment.
- ✓ SOC & ISO compliance reporting
- ✓ GDPR & CCPA aligned
- ✓ Australia Privacy Act 1988
Account Security
Multi-Factor Authentication
Add an extra layer of protection at login. Followup CRM supports email-based Multi-Factor Authentication (MFA), so every sign-in is verified with a one-time 6-digit code — for a single user or your entire team.
-
✓
Company-wide enforcement — Account Owners can require MFA for all eligible users from Company Settings → Security.
-
✓
Individual opt-in — Any user can enable "Email me a code at login" from My Settings → Security.
-
✓
Plays well with SSO — Users signing in with Google or Microsoft may already satisfy MFA through single sign-on.
1. Sign in as usual
Enter your email and password
2. Check your inbox
We email a 6-digit verification code
3. Enter & verify
Complete login with the code
Infrastructure & Controls
Enterprise-grade controls,
built in
A global platform built with world-class infrastructure, security, and privacy in
every layer.
Access Control
- Single Sign-On (SSO) via SAML
- Role-based permissions for project data
- Multi-Factor Authentication (email code at login)
- Secure authentication and password protection
Data Protection
- AES-256 encryption at rest and in transit
- 16 secure global file storage locations
- 99.9% uptime for Followup CRM services
Privacy & Compliance
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Australia's Privacy Act of 1988
- SOC & ISO compliance reporting
Every Plan
Security across every plan
MFA is included no matter which plan you're on. Higher tiers add enterprise-
grade identity controls as your team grows.
| Feature | Starter | Professional | Enterprise |
|---|---|---|---|
| Email-based MFA | ✓ | ✓ | ✓ |
| Company-wide MFA enforcement | ✓ | ✓ | ✓ |
| Single Sign-On (SAML) | — | ✓ | Enterprise SSO |
| Role-based permissions | ✓ | ✓ | ✓ |
| Multi-entity access controls | — | — | ✓ |
Compliance
Independently assessed.
Continuously improved.
Followup CRM maintains ongoing compliance reporting and certifications, with
regular third-party assessments of our security program.
SOC Compliance Reports
Audited controls over security, availability, and confidentiality
ISO Certification
Information security management aligned to ISO standards
Global Privacy Standards
Practices aligned with GDPR, CCPA, and international regulation
Defense in Depth
Multiple layers of defense
To meet new challenges and demands, Followup CRM continues to invest in
broad initiatives that help ensure optimal security across our platform.
Continuous vulnerability scanning
All applications are scanned and patched on an ongoing basis, including against the OWASP Top 10.
Active threat countermeasures
Layered technologies and monitoring designed to prevent and deter attackers.
Strict access control policies
Internal access to systems and customer data is governed by least-privilege principles.
Ongoing security training
Our team stays current on the latest security practices and threat trends across the industry.
FAQs
Straight answers
The security questions contractors actually ask us.
MFA adds a second verification step at login. When enabled, users receive a one-time 6-digit code by email that must be entered to complete sign-in. Account Owners can require it for the whole team from Company Settings → Security, or individual users can opt in under My Settings → Security → "Email me a code at login." Users who authenticate via Google or Microsoft SSO may already meet this requirement. See the full setup guide →
Customer data is stored on secure, redundant cloud infrastructure across a global network of data storage locations, with regular backups and continuous availability monitoring to keep your information accessible and protected.
Data is encrypted both at rest and in transit. Connections to Followup CRM are secured using modern TLS encryption to protect information as it moves between your browser and our servers.
Yes. Professional and Enterprise plans support SSO via SAML, allowing your organization to centralize identity management through your existing identity provider, in addition to email-based MFA available on every plan.
Integrations with tools like QuickBooks, Sage, Procore, and others are built with scoped permissions and secure authentication, so connected apps only access the data needed to perform their function.
Followup CRM undergoes regular third-party audits and maintains SOC compliance reporting and information security practices aligned with ISO standards, along with alignment to GDPR, CCPA, and Australia's Privacy Act of 1988.
If you believe you've discovered a security vulnerability, please contact our team right away at info@followupcrm.com with a description of the issue and steps to reproduce it.
Report a security vulnerability
If you believe Followup CRM has a security vulnerability, please contact us right away. Include a description of the issue and information to help us reproduce it (browser/OS version, URLs, etc.).
See Followup CRM's security in action
Talk to our team about how we help construction companies
protect their data while growing their pipeline.
↑