What the portal is for, and what it isn't
The portal holds your work with us: how you work today, our recommendations and your plan, session notes, messages, and the time you're saving. It is not a place for your sensitive business data. Please don't put client records, financial or health details, or anything your own rules mark as restricted into messages or comments here. We'll never ask you to.
Who can see it
- Your organisation: people we've invited from your company, each with their own login. Where we work with several teams, a team member sees their own team's work.
- Our team: only crivo consultants.
- The companies that run it for us, listed under "How it's stored and sent" below. Beyond them we don't sell or share it, and the portal doesn't send your information to any AI service. It isn't used to train AI models.
How sign-in is protected
- Your own password: every new password must be at least 12 characters. We store only a scrambled (hashed) version, never the password itself.
- Two-step login: anyone can add a code from an authenticator app on their phone, and we can require it for everyone at your company.
- Repeated wrong attempts are blocked: after 5 wrong tries, sign-in pauses for 15 minutes.
- Sessions end: you stay signed in for up to 30 days on a device you choose; changing your password signs you out everywhere else. Invite and reset links work once and expire.
How it's stored and sent
- Hosting: Render, a cloud hosting company, runs the portal and its database for us.
- Encrypted connections: everything between your browser and the portal, and between the portal and its database, is encrypted.
- Nothing from other websites: no tracking or analytics, and no scripts or fonts loaded from other companies, so your browser only talks to us. One essential cookie keeps you signed in.
- Email: the emails we send you about your work with us (invites, updates) come from our Outlook account, so Microsoft handles them.
- Backups: the database is backed up automatically by our hosting provider.
How long we keep things
- Call transcripts: only our team sees them, and the full transcript is deleted 30 days after we upload it. We keep the notes we took from it, which can include short quotes.
- If you stop working with us: ask us and we'll delete your portal. Once deleted, it's removed from the portal for good after 30 days; copies in backups last a while longer, until those backups are replaced.
Your Claude account is separate
What you type into Claude is stored by Anthropic under your Claude plan's terms and settings, not in this portal. Getting those settings right is part of how we onboard you, and we'll walk you through them.
Questions or concerns
If you think something isn't right, or want a copy of your data or to have it deleted, contact us at olivia@crivo.co.uk. See also our privacy notice.