A data breach response plan for a small company hands five jobs (contain, assess, notify, record and fix) to named people. That way nobody is guessing who does what in the first few hours. And the trigger can be anything: a laptop left on a train, a hijacked mailbox sending invoices to your clients, a […]
Cyber Resilience Act Reporting: What to Ask Your Software Vendors
The Cyber Resilience Act reporting rules put new duties on manufacturers. Not on the small companies that buy their products. But they do hand you, the buyer, a solid excuse to ask every vendor one thing: how will news of a flaw and its fix actually reach us? What follows is the customer’s side of […]
CRM Data Export: Making Sure You Can Leave With Your Data
A reliable CRM data export means you can pull out every record, the links between records and the full history, in a form another system can actually read. Check this before you sign. Not on the day you want to leave. If you run a cloud CRM that might stop fitting at some point (price […]
CRM Data Hygiene: How to Deduplicate Contacts Without Losing History
To deduplicate CRM contacts without losing history, merge records by confidence tier and reattach every call, quote and ticket to one surviving contact. And somewhere in the database, one buyer exists three times: one copy holds the call log, another holds the signed quote, and a third is quietly attached to an open support ticket. […]
Invoice Fraud and Fake Bank Details: Protecting Client Records
One habit stops invoice fraud and business email compromise: never change bank or contact details on the strength of an email alone. Call back on a number you already have on file, and get a second person to approve the change before anything is saved. In late July 2026 the habit matters more than usual, […]
CRM Data Retention Policy: How Long to Keep Customer Records
A CRM data retention policy gives every type of record a retention period, and that period depends on why you hold the record in the first place. GDPR doesn’t hand you a fixed number of years. You pick the periods yourself and write down why. Is your CRM full of old leads and former customers, […]
GDPR Requests in a CRM: Finding Every Copy of One Person
A customer asks you to delete their data. You open the CRM, type their surname, find one contact card, delete it. Done, right? Three weeks later an auditor wants to know what happened to that same person’s support history, the two quotes you sent last spring, and the newsletter list they were somehow still on. […]
Local vs International CRM - Support, GDPR, and Language
Picture a growing business at a familiar crossroads. Stick with a local CRM vendor that speaks your language and knows your market, or commit to a global platform with a huge feature set and a name everyone recognizes. On paper both look fine. The real differences only show up after you’ve signed. And three things […]
Employee Offboarding in a CRM: Removing Access, Keeping Data
Employee offboarding in a CRM comes down to four moves: deactivate the person’s login on their last day, hand everything they owned to someone else, check every connected tool, and keep their records, because that history belongs to the company. Run a small business? Just realised a former employee might still be able to sign […]
Data Security in Cloud-Based CRMs - What to Watch For
Your CRM probably knows more about your customers than any other tool in your stack. Contact details, deal history, payment info, email threads, support notes - it’s all sitting in one place. That’s what makes it so handy. And so sensitive. For a small or mid-sized business, a breach here is never just an IT […]










