How we protect your account and data.
These are the measures built into the platform and tested.
Two-step verification
Optional for customers, mandatory for staff and for sensitive financial actions.
Separate organisations
Your organisation only sees its own data; this separation is also enforced in the database.
Your signed-in devices
You can see where you're signed in and end any session; after a password change, you're signed out everywhere.
No secrets in the browser
Access keys and bank details stay on our servers; your browser never gets an access key to our partners.
Four-eyes check
One staff member prepares each payout; another approves exactly that amount and that account.
Who did what
We record important actions: who, when and why. No one can alter that log afterwards.
Found a security issue? Report it confidentially to contact@crystal-distribution.com; we'll confirm receipt and keep you updated.