Security

You trust us with your agency's book of business. Here's how we protect it.

Encrypted everywhere

All data is encrypted in transit with TLS and at rest in our cloud database. Proposal links use unguessable tokens, so only people you share them with can open them.

Carrier passwords never stored

The Chrome extension works inside your own signed-in browser sessions. Your carrier portal credentials stay between you and the carrier — SalesBuddy never sees or stores them.

Team access by role

Producers see only their own quotes and customers. Owners see their team's activity. Every access rule is enforced by the database itself, not just hidden in the interface.

Short-lived connections

The extension connects with short-lived, server-verified tokens. Signing out of the web app ends the extension's access — there are no long-lived credentials floating around.

Restricted internal access

Access to production systems is limited to what operations require and is logged. We never look at your customer data unless you ask us to for support.

Report a problem

Found a security issue? Email help@salesbuddy.org with the details. We take every report seriously and respond within one business day.