Investor data deserves real protection
Your files hold Social Security numbers, tax IDs and bank details. Here is what Lead Sifter does about it.
Two-step sign-in is required
Every staff account must enrol in authenticator-app two-step sign-in before it can use the product. A stolen password alone can’t sign in, and can’t reveal or erase sensitive answers.
Sensitive answers are encrypted
Social Security, tax ID and bank answers collected through e-signature are encrypted at rest with AES-256-GCM, and the document text is encrypted too.
Masked everywhere
Lists, notes, the activity log and the AI assistant only ever see the last four digits. No tool or integration can reveal or erase a full value.
Revealing needs a fresh code
Only the organization owner (or an agency admin) with two-step sign-in on can reveal a full value, and only after entering a new security code emailed to them. Reveals hide again after 30 seconds and are logged with name and address.
Signers are verified twice
Investors open a private link, then enter a one-time code sent to their email before they can see or sign anything. Links and codes expire, are limited in tries, and lock after repeated mistakes.
Erase on a schedule
Choose to have sensitive answers erase themselves a set number of days after signing. The signed record, signature, time and document fingerprint are kept.
An audit trail you can read
Every step of a signing is recorded: created, code sent, viewed, signed, revealed, erased, with time, person and network address.
Organizations are walled off
Each client organization’s data is kept separate from every other’s, and the agency’s controls over messaging limits, pausing and billing are separate from what clients can change.
Changes can be undone
Edits and deletions, including those made by the assistant, are recorded and can be reversed. Anything risky the assistant wants to do waits for your approval first.
Texting rules built in
Consent is recorded with where it came from, STOP is honored automatically, and registration with the carriers is guided step by step.
Your data, your call
- Moving in from GoHighLevel is read-only. Your original account is never changed.
- Payments are handled by Stripe. Lead Sifter never sees or stores your card number.
- You can use your own AI key instead of ours.
Questions about how we handle your data? Ask us and we’ll answer in plain language.