Security

How ZonoLead handles your data

ZonoLead is built to keep your data safe, private and encrypted.

Safeguards in the product

Built into ZonoLead from the first version, and covered by automated tests.

Access by role
People see what their role needs, and losing access takes effect at once.
- Agents see only the leads they own; managers and admins see the whole organization
- Only org admins change settings, web forms and roles, or read the audit log
- Deactivating someone cuts off their access at once, live connections included
An audit log of every view and change
Org admins can see who opened, changed, assigned, imported or exported lead data, and when.
- Opening a lead is recorded, not just editing it
- Entries are only ever added: nobody can edit or delete them
- An entry keeps the person's trail, even when the account is removed.
Encryption and secure sign-in
We keep your data encrypted in transit and at rest, and your password is never stored in plain text.
- Data in transit is protected with TLS encryption
- Passwords are salted and hashed, never stored in plain text
No lead lost on the way in
A lead is saved to the database before anything else happens to it, then processed and retried if a step fails.
- Leads that arrive while a background service is down are picked up when it is back
- Tested by stopping our workers in the middle of hundreds of submissions: every accepted lead came through