Security and access

What Crossgile protects: passwords, sessions, company and project roles, API keys and guest links.

Account protection

Mechanisms enabled in every installation

Passwords are stored only as bcrypt hashes — the original password cannot be recovered, only reset.

Signing in creates a server-side session. Signing out ends it on the server, so the token stops working.

Card changes — stickers, moves, edits — are kept in the task history.

Administrators manage the company, employees work in their projects. Rights never exceed the role.

A key grants only the required rights (e.g. reading cards), is shown once and can be revoked at any time.

Board link access can be restricted: view only, no editing or management.

Where your team’s data lives and how it is transmitted

All application traffic goes over HTTPS; data in transit is protected by TLS.

Company data is available only to its members: projects, boards, wiki and files never cross companies.

Crossgile servers and databases are controlled by the operations team.

If you found a security issue, write to us — we will investigate and reply.

Join the community of teams that boost their productivity with Crossgile

Beta period: all features free, no credit card required.