Security Center
Data protection & security at LavaLoft.
Here you can see how LavaLoft handles your CRM data and find all the relevant documents for your internal review.
View security documents01 / Documentation
All security documents at a glance.
Here you will find the relevant documents for your data protection and security review. Without registration and without providing your email address.
Data Processing Agreement (DPA)
DPA · PDF
The contractual basis for processing personal data on behalf of our customers.
Version 1.0 · As of 16 Oct 2026
Technical and organizational measures (TOMs)
TOMs · PDF
Our documented measures to protect customer data, control access and operate the software securely.
Version 1.0 · As of 16 Oct 2026
Subprocessors
Overview of the external service providers involved in processing customer data, including their tasks and processing locations.
Version 1.0 · As of 16 Oct 2026
Data processing information
Which data LavaLoft processes, what it is needed for, and which storage and deletion rules apply.
Version 1.0 · As of 16 Oct 2026
Download all security documents
DPA, TOMs, subprocessors and data processing information in one ZIP file.
ZIP · 4 PDF documents
02 / Data access
Which data does LavaLoft use?
LavaLoft analyses the relevant data in your CRM system to detect errors and missed activities in your sales pipeline. Which data is processed depends on the features and integrations you use.
Read access
LavaLoft reads the CRM data required for the analysis. The free pipeline check detects errors without changing records in your CRM.
Write access only with approval
You decide whether LavaLoft may make changes in your CRM. Write functions are only activated with your explicit approval.
Which data is processed?
Depending on the function, this includes for example deal and pipeline data, tasks, activities, contacts, notes and user information. With activated integrations, calendar data and email metadata may also be added.
The complete data categories and access permissions can be found in our data processing information and in the DPA.
03 / Safeguards
Transparency about how your data is handled.
Access & permissions
The CRM connection is established via the provider’s respective authorization. LavaLoft uses these permissions for data analysis. You activate write functions yourself and can disconnect the connection again.
Hosting & storage
LavaLoft processes and stores data in its application infrastructure, for example for user accounts and callback functions. We disclose which service providers and storage locations are used in our documentation.
Retention & deletion
LavaLoft processes data to provide the agreed functions. Defined retention and deletion rules apply to stored data and are described in our contractual and data protection documents.
Algorithms instead of AI models
LavaLoft detects errors using algorithmic checks and defined rules. For this error detection we do not use external AI models and do not pass CRM data to such models for analysis.
Further information about our technical and organizational measures can be found in our security package.
Download security documents04 / FAQ
Frequently asked questions about data protection & security.
05 / Contact
Do you have further security questions?
Want to review LavaLoft internally or need additional information about our data processing? We are happy to help and support you with technical and data protection questions.
Send a security request