Security
Security & your data
Your clients trust you with their money and their details. Here is, in plain words, how Spire protects that trust.
Your data is walled off
Every firm's records are isolated at the database level. Another firm using Spire can never see your clients or leads.
Encrypted everywhere
Data is encrypted in transit and at rest. Sensitive settings, such as API keys, are additionally encrypted by Spire.
Only your people
Owner, Team Lead and RM roles decide who sees what. An RM sees only their own clients unless you allow more.
No passwords to leak
Sign-in is through Google. Access is checked again every few minutes, so removing someone takes effect quickly.
Backed up daily
Automatic daily database backups, plus a separate nightly copy we can restore from.
Your data stays yours
We never sell it or use it for advertising. When you leave, we hand it back to you and delete it.
How firms are kept apart
Spire is used by several firms, and some of them compete with each other. Each firm's data lives in its own workspace, and the database itself enforces that a request can only ever read or change rows belonging to the signed-in person's firm. This check does not depend on screens hiding things; it happens on every query.
Where your data lives
- Spire's application servers run in Mumbai, India.
- Your workspace data is stored in a managed Postgres database (Supabase), encrypted at rest.
- Our test environment is a completely separate database that holds only made-up data — real client data is never used for testing.
Who can see what inside your firm
- The owner adds and removes people, and chooses each person's role.
- RMs see their own leads and clients; Team Leads see their team; the owner sees everything.
- Every change is recorded on a timeline, so you can always see who did what and when.
- Changes to settings are logged separately and are visible to the owner only.
AI, with a human in charge
AI features draft notes and messages using your firm's own Google Gemini key. A draft is only a draft: nothing is saved or sent to a client until someone at your firm reviews and confirms it. Spire never contacts your clients on its own.
Monitoring and incidents
Errors are monitored so we can fix problems quickly, and personal identifiers are removed from those reports. If a security incident ever affects your firm's data, we will tell you without undue delay, explain what happened and what we are doing about it.
Leaving Spire
Your data belongs to your firm. If you stop using Spire, we give you an export in a standard format (CSV/Excel) and then delete your data from our systems. Read the details in our privacy policy.
Questions?
If your compliance team has questions about how Spire handles data, talk to us directly.