Your data stays yours.
ScoutCurrent separates customers by design and gives administrators the controls to protect what is inside.
A private database for every customer
When you sign up, the system creates a database and an application instance for you alone. There is no shared table that holds several customers, and no “tenant” column deciding who sees what. A mistake in one customer’s setup cannot expose another’s data, because the data is not in the same place.
You can leave with your data. See “Taking your data with you” below.
Safeguards in the product
This is what exists today.
Two-factor sign-in
Administrators can require a second factor and set an idle sign-out timer.
Roles, teams and access review
Fixed roles, teams, deactivation of leavers and an access review with an activity export.
Audit log
An append-only trail of important actions, and a log of staff views of records.
Retention rules and purge
Set how long call recordings and messages are kept, and purge on schedule.
Data-loss checks
Detects sensitive patterns such as Social Security numbers in documents and messages.
Per-user API keys and OAuth for MCP
Programmatic access is tied to a person and can be scoped.
Signed, expiring links
Recording playback, share links and signing links are token-based and expire.
Review before send
AI-drafted replies and outreach wait for a person to approve them.
Taking your data with you
An administrator can export a full copy of the account from Settings, under Admin, with “Export all data”. When it is ready you get a notification and a download link that works for 24 hours; the file is then deleted.
- What you get. A ZIP file with one CSV file for each kind of record that has data (contacts, companies, company contacts, notes, activity, tasks, calls, call transcripts and summaries, texts, emails, meetings, team chat, documents, e-signature requests, products and invoices, users and roles, and more), a manifest listing every file with its row count, and a plain-language README.
- Files. The ZIP lists every stored file (name, record, path, size). The file contents are not inside the ZIP. You can choose to add a list of download links, each valid for 24 hours, and download the files from those.
- Left out on purpose. Passwords and other secrets (access tokens, API keys, mailbox and calendar credentials), integration settings, internal audit and access logs, and background queues.
- Format. CSV, UTF-8, with ISO dates. Column names match the database, so an export can be edited and imported again.
Any contacts or companies list can also be exported to CSV or Excel from the list itself. Requesting, building and downloading a full export are all recorded in the audit log. Rows added while an export runs may or may not be included.
Going the other way, contacts, companies and company contacts can be imported from CSV or Excel files of up to 50,000 rows, with a check before anything is saved and an administrator undo for 7 days.
What we do not claim
ScoutCurrent has not completed any third-party security audit or certification, and we do not claim compliance with any specific standard, including HIPAA and SOC 2. If your work needs a particular compliance agreement, ask us before you sign up.
Phone and texting run on your own Twilio account at launch, so Twilio’s own terms and security practices apply to that traffic.
Questions about security? Email hello@scoutcurrent.com.
See ScoutCurrent with your own pipeline.
Book a short demo and we will show the product on a workspace set up the way your team sells.
Get a demo See pricing