Organisation-scoped Row Level Security, role-based access control (admin/mod/viewer), hashed API keys, and comprehensive audit trails.
Multi-tenant CRMs often have weak isolation between organizations. Permission systems are either too rigid or too loose.
Kantos enforces organisation-scoped RLS on every table, with admin/mod/viewer roles, hashed API keys, and a log of record changes, API calls and automation runs.
Everything Security & Permissions offers out of the box.
Organisation-scoped RLS on all core tables ensures complete tenant isolation at the database level.
Three fixed roles, the same on every plan: admins manage everything, moderators add and edit, viewers can only look.
Choose what each role can see (all records, only their own, or nothing) and what they can do, such as deleting records, exporting or sending campaigns. Admins always see everything, and a log shows every export and large read.
Keys are stored only as scrypt hashes and shown once. Each has a short prefix to recognise it, a rate limit, a usage log, and can be revoked at any time.
Record changes are logged with who made them, when, and the before and after values. API calls appear in Request Logs, and every automation run in the automation logs.
Use Cases
Give your sales admins full access and keep everyone who only needs to look read-only as viewers.
Use audit trails and soft-delete patterns to meet regulatory requirements for data access and retention.
Explore More
AI is woven into every layer of Kantos — from MCP access so agents can manage your CRM via chat, to autonomous live chat, smart form classification, AI onboarding, knowledge base RAG, and intelligent data import.
One script picks up the forms on your website, whether it runs on WordPress, Wix, Squarespace, Webflow, Shopify or plain HTML. You approve each new form once; after that, its submissions become records on their own.
Ready to make the switch?
Kantos is new, and we're building it with our first customers. Start a 14-day trial of Professional and talk directly to the founding team.