# Security overview

Security in Fluid CRM is designed to protect customer data, account access, and system integrity without adding friction to daily work.

This page explains the security principles and safeguards Fluid applies at a product level.

***

### How Fluid protects your data

Fluid CRM uses industry-standard practices to protect data from unauthorized access, misuse, or loss.

Security measures include:

* Secure authentication and account access
* Controlled access to workspaces and data
* Separation of user, workspace, and billing systems
* Enforced permissions for team members

Fluid does not expose internal systems directly to users.

***

### Account security

Account access is protected through:

* Email-based authentication
* Encrypted credentials
* Role-based permissions for team members

You are responsible for:

* Keeping your login credentials secure
* Not sharing account access
* Reporting suspicious activity promptly

If unauthorized access is detected, accounts may be temporarily restricted to protect data.

***

### API and integration security

API access is protected using API keys.

Security rules:

* API keys are shown only once at creation
* Keys must be stored securely
* Compromised keys should be rotated immediately
* Unused keys should be deleted

API keys grant access according to their scope and must be treated like passwords.

***

### Infrastructure and data handling

Fluid CRM uses trusted infrastructure providers and applies reasonable technical and organizational safeguards.

These safeguards are designed to:

* Prevent unauthorized access
* Reduce data exposure risk
* Protect against accidental data loss

No system can guarantee absolute security, but Fluid continuously improves protections as the product evolves.

***

### What security overview does not cover

This page does not:

* Replace the full Privacy Policy
* Describe internal infrastructure in detail
* Guarantee protection against all threats
* Provide legal assurances

For legal terms and data rights, refer to the Privacy Policy and Terms & Conditions.

***

### What to read next

* **Privacy and GDPR** – how personal data is handled
* **API settings** – securing integrations
* **Account settings** – managing personal access

***


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://fluid-crm.gitbook.io/fluid-crm-docs/account-and-billing/security-overview.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
