Skip to content
SalesTub

security

Security & Role-Based Access Control

Enterprise-grade security with granular permissions and comprehensive audit trails.

  • Plans from $150/user/year
  • Cancel anytime
Roles and permissions settings in SalesTub CRM with custom roles, subscription limits and the organisation hierarchy
100%
Encrypted
2FA
Enabled
SOC 2
Aligned

Overview

What is Security & Role-Based Access Control in SalesTub?

Your customer data is your most valuable asset—protect it with enterprise-grade security. Define exactly who can see and do what with granular role-based permissions. Enable two-factor authentication for all users. Monitor every action with comprehensive audit logs. SalesTub is built with security at its core, from encrypted data storage to SOC 2-aligned infrastructure controls.

  • Granular role-based access control with custom permissions
  • Two-factor authentication (TOTP) for all user accounts
  • Complete audit logs of every system action
  • IP address whitelisting for office networks
  • Session management with automatic timeout
  • SOC 2-aligned infrastructure controls
  • End-to-end encryption for sensitive data
  • Password policies with complexity requirements
  • Single Sign-On (SSO) with Google and Microsoft

How it works

Up and running in 3 steps

  1. 1

    Define Roles

    Create custom roles like Sales Manager, Sales Rep, or Read-Only Auditor. Each role gets specific permissions for modules and actions.

  2. 2

    Assign Permissions

    Fine-tune each role with granular permissions: read, create, edit, delete, export. Control access at the module, record, and field level.

  3. 3

    Monitor Activity

    Every action is logged with user, timestamp, IP address, and details. Searchable audit logs make compliance reporting easy.

Use cases

Built for how you sell

Whether you sell to businesses or consumers, at a counter or in the field, SalesTub adapts to your process — not the other way round.

01

Multi-Department Organizations

Different departments see only their data. Sales sees contacts and deals. Support sees tickets. Finance sees invoices. No accidental data exposure.

02

Regulated Industries

Meet compliance requirements for healthcare, finance, and government with complete audit trails, data encryption, and access controls.

03

Remote Sales Teams

Enable secure access from anywhere with 2FA, session management, and device tracking. Know exactly who accessed what and when.

04

Enterprise with Contractors

Give contractors limited access to specific accounts or projects. Revoke access instantly when projects end without affecting other users.

For the whole team

One tool, every role

Business owners

See exactly where revenue comes from, which channels convert and what will close this month.

Sales managers

Assign leads instantly, watch team activity live and make sure no follow-up is ever missed.

Sales reps

Less data entry, more selling — every lead, call and message in one place, on web and mobile.

Works with

Connected to the tools you already use

  • Google SSO
  • Microsoft SSO
  • SAML 2.0
  • Active Directory
  • Okta
  • Auth0
  • OneLogin
  • JumpCloud

FAQ

Security & Role-Based Access Control: questions

How granular are the permissions?

Extremely granular. You can control access at the module level (Contacts, Deals, Reports), action level (read, create, edit, delete), and even field level (hide sensitive fields from certain roles).

Is two-factor authentication mandatory?

2FA is available for all accounts and can be made mandatory by administrators. We support TOTP apps like Google Authenticator, Authy, and Microsoft Authenticator.

How long are audit logs retained?

Audit logs are retained for 2 years on Professional plans and indefinitely on Enterprise plans. Logs can be exported anytime for compliance or analysis.

Can I restrict access by IP address?

Yes. On Enterprise plans, you can whitelist specific IP addresses or ranges. Users connecting from non-approved IPs are blocked even with valid credentials.

Is data encrypted?

Yes. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Sensitive fields like OAuth tokens use additional encryption layers.

Do you support Single Sign-On?

Yes. We support SSO with Google Workspace and Microsoft 365. SAML 2.0 integration for other identity providers is available on Enterprise plans.

Put Security & Role-Based Access Control to work today.

Get started in minutes. Cancel anytime. No long-term contracts.

  • Setup in 5 minutes
  • No long-term contracts
  • Cancel anytime
Chat with sales