Your data is protected
by design, not by luck.
Graciax is built with security at every layer. From 256-bit encryption to DPDPA compliance, your CRM and HR data stays private, safe, and under your control.
Security you can verify
Every layer of Graciax is built with security-first principles. Here's what protects your data.
How we protect your data
Six layers of security that work together so you can focus on running your business.
Data Encryption
- HTTPS with TLS 1.3 on all connections
- AES-256 encryption for stored data
- Isolated production environments
- Encrypted database connections (SSL)
Account Security
- Passwords hashed with bcrypt
- Two-factor authentication (2FA)
- Auto-logout on inactivity
- Suspicious login alerts
Infrastructure
- Supabase (SOC 2 Type II certified)
- AWS Mumbai region (ap-south-1)
- 24/7 automated monitoring
- Auto-scaling with zero downtime
Backup & Recovery
- Daily encrypted backups
- Point-in-time recovery (PITR)
- Geo-redundant storage
- Full restore within 24 hours
Access Controls
- Row-level security (RLS) on all tables
- 4 permission roles (Admin, HR, Mgr, Emp)
- Permission-based support access
- No third-party data sharing
Regulatory Compliance
- DPDPA 2023 (India) aligned
- OWASP Top 10 protections
- Full audit trail with IP logging
- Regular dependency patching
Found a security issue?
We take every report seriously. Contact our security team and we'll respond within 24 hours.
support@graciax.comGraciax reviews and updates security infrastructure, practices, and policies regularly.
Join 150+ growing teams
trusting Graciax CRM
Built-in SOC 2 controls, GDPR readiness, and rock-solid reliability
plus the productivity gains your team craves.
Graciax’s end-to-end AES-256 encryption and strict SOC 2 controls let us migrate highly sensitive lead data with confidence. Zero incidents in 18 monthsour board finally sleeps at night.
Jonathan Lee
CTO, Vertex Solutions
Role-based access controls and real-time audit logs make GDPR audits painless. Security tickets solved in <30 minthat’s a partner you can rely on.
Priya Kapoor
Chief Information Security Officer
The UI is as intuitive as emailnew hires ramp in 30 minutes. Unlimited-user pricing means we scale freely across our franchise network without surprise costs.
Laura Williams
Operations Manager
OAuth 2.0 SSO and mandatory 2FA rolled out to 150+ reps in a dayno more password-reset chaos. All API traffic is TLS 1.3-only, exactly what our auditors demanded.
Carlos Reyes
IT Manager
Pipeline stages are crystal-clear, and automated follow-ups lifted conversions by 32% in one quarter. The single-pane dashboard keeps our entire sales floor in sync.
David Chen
Sales Director
Daily encrypted backups across geo-redundant regions meet our toughest data-residency clauses. Point-in-time restores saved us after an accidental bulk delete.
Anna Müller
Data Protection Officer
