Your customer data is business-critical. We treat it that way.
Birdwink holds what the commercial side of a business needs and nothing more: who enquired, what they asked about, which campaign brought them and what happened next. Clinical records, documents and anything regulated stay in the operational system you already run.
What is in place today.
Encryption
TLS 1.2 or higher in transit and AES-256 at rest, with platform-managed key rotation.
Role-scoped access
Five role templates. The front line sees enquiries, not spend; agencies see campaigns, not contact details; revenue and exports are gated per role.
Audit logging
Every view, edit, export and permission change is recorded with user and timestamp, and admins can export the log.
Regional hosting
Choose the region your workspace is stored and processed in when you create it.
Authentication
Two-factor authentication, session management with remote revoke, and single sign-on on Enterprise.
Least-privilege integrations
Ad platforms and channels authorise in your own accounts with read access to spend and lead data. Write access is used only for offline conversions you switch on, and you can revoke at any time.
Backups
Encrypted daily backups with point-in-time recovery, tested on a schedule.
Export and deletion
Full CSV export of everything at any time without a support ticket, and workspace deletion on written request.
Read the documents, then try it.
Our Privacy Policy and Terms are written to be read. A data processing agreement is available on request before you upload a single record.