Security
Your records stay yours. Every send has a name on it.
Prowlen reads public sources and the CRM fields you allow. Nothing leaves without a person approving it, and every approval is logged with the sources behind the draft.

The controls, in plain words.
What is stored, where, for how long and who can see it. Open a row for the detail.
- Stored in
- EU or US region, chosen at sign-up
- Encryption
- TLS 1.2+ in transit, AES-256 at rest
- Kept for
- Briefs 12 months, send log 24 months
- Model training
- Never on your records
- Sign-in
- SSO and two-step on every plan
Only the objects and fields an admin ticks during setup. By default that is account name, domain, owner and stage. Contact notes and deal values stay off until you switch them on.
No. Drafts wait in the review queue until the rep who owns the account approves them. Admins can require a second approval for chosen accounts or claim types.
Public pages: company sites, filings, job boards and news. Pages behind a login or a paywall are not read. Each claim in a brief keeps the address and the date it was read.
The draft as generated, the edits made, who approved it, when it was sent and the sources it cited. Admins can export the log at any time.
Admins can delete a single account's briefs or the whole workspace from settings. Deleted data leaves backups within 30 days.
A short list of hosting, email delivery and model providers, each under a data processing agreement. The current list is sent on request and changes are announced 30 days ahead.
Write to the security team through the contact page. A person acknowledges reports within one working day.
Who approved it, and what it read.
Each draft keeps a record of its sources, the fields it was allowed to see and the person who said yes.
- Sources
- Linked on every claim
- Fields
- Switched on one at a time
- Approvals
- Named and timestamped







