Security at Iqarly

How we protect brokerage CRM data — practical controls, not marketing theatre. We do not claim certifications we have not earned.

Cloudflare edge

Iqarly runs on Cloudflare Workers and related platform services. Traffic benefits from Cloudflare’s global network, DDoS protections, and TLS for data in transit.

Encryption in transit

Customer sessions and API calls use HTTPS. Agency public sites and CRM dashboards are served over encrypted connections.

Tenant isolation (D1)

Agency data is scoped by tenant. Platform and agency databases are designed so one brokerage cannot read another’s CRM records through normal application paths.

Role-based access

• Role-based CRM access (owners, admins, agents, accountants, and more)
• Platform admin and agency workspaces are separated
• Media objects stored in R2 with controlled /media routes

If you believe you found a security issue, email support@iqarly.com with details.