Security and data
Your clients trust you with their business. We built for that.
A private database for every agency, backups you can see, an export you run yourself, and roles that never leak cost to the people who should not see it.
In one line
Your data is yours. Private by default, portable on demand, gone when you say so.
No shared tables, no lock-in, no surprise retention. The legal detail is in the data processing addendum.
How it is kept
Four things that are true of every workspace.
A private database for every agency
Your workspace has its own database, created for you alone. Nothing about your clients, hours or invoices sits next to another agency's data.
Backups you can see
A snapshot every day, kept for a rolling period, plus a separate copy in long-term storage. Backup health shows on your account page, so you never have to ask.
Your data leaves when you say so
Export the whole workspace in one file from Settings whenever you like. Delete it and you have 30 days to change your mind before it is gone for good.
Roles that hold everywhere
The same permissions apply on every page, every report, every connected tool and to AI. Nobody sees a number their role does not allow.
Who sees what
Hours for the team. Money for the leads. Cost for you.
Roles decide what each person can see, and the rule holds on every page, in every report, in every connected tool and for AI.
| Can see | Members and managers | Account managers and directors | Admins |
|---|---|---|---|
| Hours and tasks | Yes | Yes | Yes |
| Budgets, retainers and revenue | No | Yes | Yes |
| Cost, salary and margin | No | No | Yes |
| Billing, roles and settings | No | No | Yes |
The detail
Every layer, plainly.
Sign in with Google
Everyone signs in with their work Google account. Access follows the account, not the email address, so a changed address keeps access and a re-used address cannot take it over. Remove someone from your Google Workspace and their access ends.
Support access is audited
When our team helps inside your workspace it is recorded, and support access cannot take an irreversible action.
Card details stay with Stripe
Client card payments are handled by Stripe. Verbial never stores a card number.
Consent on every contact
Every contact carries where their consent came from and when, whether it was imported or captured by a form. Opt-outs are honoured by default.
Client links that expire
Proposals, reports and the client portal are shared through scoped links that are rate-limited and can be revoked. Signed agreements cannot be altered afterwards.
A record of every change
Changes to settings, roles, billing, contracts and imports are logged with who made them and when. Admins can read the log, and Enterprise includes an export of it.
Preview first, undo after
Imports show exactly what will come across before anything changes, and a whole import can be undone in one click.
Encrypted, never logged
Connection secrets are encrypted at rest and never appear in logs or exports.
Questions
Where is my data stored?
In a private database created for your workspace alone, hosted in the United States. Enterprise agreements can specify a dedicated region.
Can I export everything?
Yes. Settings, Account, Data produces a complete export of your workspace with secrets removed, delivered by a single-use download link.
What happens to my data if I stop paying?
The workspace becomes read-only at the end of the paid period. If you delete it, the database is kept for a 30-day grace period before it is removed, and you can cancel the deletion during that time.
Who at your company can see my data?
Support staff can open a workspace only to help you, every such session is recorded in your audit log, and support access cannot delete data or change billing.
Does AI see my data?
AI features work inside your workspace with the permissions of the person using them, so someone who cannot see margins cannot ask about them. Nothing is used to train models.
Do you complete security questionnaires?
Yes. We answer security questionnaires and walk through the architecture with your team as part of an Enterprise agreement.
Agency operating software
Run the agency on a system you can leave any time.
Which is exactly why agencies stay.