Built to be trusted with a builder’s customer database
One database per workspace, two-factor and passkeys, encryption at rest, an append-only audit trail, and a DPDP Act 2023 processor posture with a published data processing agreement.
- Storage
- One database per workspace
- At rest
- AES-256-GCM
- Sign-in
- Two-factor · passkeys
- DPDP Act
- We are the Processor
01Isolation
Your buyers’ data, in your own database
Your buyer list, with phone numbers, PAN and payment history, is the business. In ZevroCRM each builder gets its own database — not one big table shared by every customer — so one client’s buyers are never stored beside another’s, and a workspace can be exported or deleted on its own.
Each workspace, on its own
- [A]Provisioned on its own
- [B]Exported on its own
- [C]Deleted on its own
One client’s buyers are never stored beside another’s.
02Controls [5]
The controls in place today
Only what exists is listed. Each line below is a control in the product now.
- [01] Sign-in
Two-factor and passkeys
Authenticator app with recovery codes, enforceable per workspace. Passkeys for fingerprint or face sign-in. Sessions visible and revocable; account lockout; rate limits.
- [02] At rest
Encryption at rest
AES-256-GCM for sensitive personal fields — Aadhaar, PAN, addresses, payment references. TLS in transit. A strict content-security policy on every page.
- [03] Audit
Append-only audit trail
Every change — a stage move, a cancelled commission, a project bank account change — is attributed to a user and kept. Management can read it; nobody can edit it.
- [04] AI
AI that never sees who your buyers are
AI is off until your data-protection record names a provider. Names, phone numbers, emails, Aadhaar, PAN and bank numbers are swapped for placeholders before sending and restored only inside your workspace.
- [05] DPDP Act
DPDP Act 2023 posture
Your business is the Data Fiduciary; ZevroCRM is the Processor. A data processing agreement listing sub-processors is published, and workspace data is exportable and deletable.
Scheduled backups. A full security review and hardening pass was completed in August 2026.
03Proven in production
Live, tested, and in daily use
Not a prototype. The platform has run real enquiries, quotes and bookings for a Chennai builder since July 2026, across residential, joint-venture and custom-construction lines. What follows is what can be checked, not customer quotes.
In daily use at a Chennai residential builder since July 2026 — real quotes, real bookings.
A product of Ethereal Design and Askel Technologies, made in Chennai. Indian defaults everywhere: ₹, lakh and crore, DD-MM-YYYY, IST, RERA, DLT, GST and TDS.| Fact 01 | Multi-tenant platform live since August 2026: one database per workspace and our admin console for provisioning, plans, modules, usage and support. |
|---|---|
| Fact 02 | Automatic checks for vulnerable software before each release; a deploy script with verification and rollback; scheduled backups. |
| Fact 03 | WhatsApp staff alerts delivered to real handsets in production; Meta business verification complete. |
| Fact 04 | Security review and hardening pass, August 2026. |
04Data questions
Where your data sits, and who can reach it
What an IT administrator or a compliance reviewer asks before sign-off.
How is our customer data kept separate from other companies?
Every ZevroCRM workspace gets its own database, rather than one big table shared by every customer. That means one company’s buyer records are not stored alongside another’s, and a workspace can be exported or deleted on its own.
What security controls does ZevroCRM have?
ZevroCRM supports enforced two-factor authentication and passkeys, so staff can sign in with a fingerprint or face instead of a shared password. Every change is attributed to a user in an audit trail, and each workspace is isolated in its own database.
Where does our data sit under India’s DPDP Act?
Under the Digital Personal Data Protection Act, 2023, the subscribing business remains the Data Fiduciary for the buyer data in its ZevroCRM workspace and ZevroCRM acts as its Processor. A data processing agreement listing our sub-processors is available at /in/legal/dpa/.
What happens to our data if we stop using ZevroCRM?
Your workspace data stays exportable and deletable for as long as the workspace exists. On exit we confirm the export and deletion steps with your named administrator rather than deleting anything on our own schedule.
Can ZevroCRM run on our own brand and domain?
Yes. ZevroCRM is white-label: a workspace set up for it can run on your own domain with your branding, and use your own WhatsApp sender number. Registering your own number typically takes around two weeks, so the shared sender is used until then.
Privacy policy · Still unsure whether it fits how you sell? Book a demo or write to hello@zevrocrm.com.
Let’s talk about
your property sales.
Tell us a little about your team and projects. We’ll show you exactly how ZevroCRM fits your sales workflow — from first enquiry to handover.
- A 30-minute personalised walkthrough
- See it set up with your own projects
- Or ask for a free 1-week trial workspace — mention it in your message
- Guidance on moving off spreadsheets
- No obligation — we reply within one business day