Roles and access rules
Everyone sees and changes exactly what they need: roles with permissions, own-and-unowned visibility, and access rules on record attributes with every decision explained.
Roles for your team
A role is a set of core and module permissions: see your own or all contacts, conversations, deals and tasks, assign conversations, set up stages, export data. Ready-made Manager and Client roles get you started.
Rules when roles are not enough
"Nobody changes closed deals", "interns do not see wholesale deals", "a client sees and comments only on their task list". A rule allows or denies actions on records by their attributes: stage, owner, list, custom fields. A denial always wins.
One truth everywhere
Rules apply the same way in tables, boards, record pages, exports, the API, MCP and the assistant. Check access explains why someone sees a record: their role, or a particular rule.
Safe by default
Rules only add to roles.
Lose access at once, tokens included.
Staff, roles, access and channels are theirs alone.
See no more than the person they act for.