Security & compliance · Permissions
Roles built from individual permissions, and two logs: the login history and the log of sensitive actions — export, deletion, change of rights. Kept with minimum retention periods that nobody can lower, not even you.
No credit card required
In practice
Every role is an assembly of individual permissions — view, create, export, delete — by area. Standard roles cover the common cases; your own are built without us. A front desk agent will never see the export, a reader will change nothing.
Each log has a default retention period and a minimum set by Metaventus: the audit log is kept six years by default and never less than one year; the login history twelve months by default, never less than ninety days. Your organisation can extend these periods, but not shorten them below the minimum — and every change is itself logged.
The login history says who signed in, when, from where, and by what means. The audit log records sensitive actions — export, deletion, change of rights, creation or revocation of an API key — with the author and the timestamp. Both can be consulted in the application for your internal controls.
For your CISO, your DPO or your internal audit, on request.
Security & compliance
Your data in the EU, backed up, locatable — and an HDS option for healthcare.
TLS in transit, encryption at rest, hashed passwords, secrets out of the code.
2FA — SMS, app or passkey — mandatory for administrators; enterprise SSO; ProConnect, FranceConnect and FranceConnect+.
A dedicated service reads security events continuously, opens incidents graded by severity, summarises and recommends — then alerts.
Consent by channel, tooling for access and erasure rights, anonymisation, cascading deletion.
99.9% SLA on the Enterprise plan, a public status page, documented incidents.
FAQ
Yes, from the individual permissions. A "Front desk agent" role that sees requests without being able to export contacts takes a few clicks to build.
No: it is append-only, and it is purged only when the retention period expires, never by hand.
You can extend it freely. Shortening it is only possible down to the minimum set by Metaventus: a compliance minimum that could be lowered from the interface would no longer be one.
Another question? Write to us — a human will answer.
Create your free account in two minutes: CRM, telephony, marketing, appointments and customer service — all in one place, with AI built in.
No credit card required
