Security & Data Protection

Your Data Security Is Our Priority

NextLevel MCA is built with security at every layer. We understand you're trusting us with sensitive client information, and we take that responsibility seriously.

Enterprise-Class Infrastructure

Our platform is built on industry-leading cloud infrastructure

Database Security (Supabase)

AES-256 encryption at rest for all stored data
TLS 1.3 encryption for all data in transit
Automatic daily backups with point-in-time recovery
SOC 2 Type II certified infrastructure

Application Hosting (Railway)

Isolated container environments
Automatic security patching
DDoS protection
Private networking between services

GoHighLevel Integration

OAuth 2.0 secure authentication
No storage of GHL credentials
Token-based API access with automatic refresh

Protecting Sensitive Information

Encryption

All data encrypted in transit using TLS 1.3
Sensitive fields (SSNs, bank account numbers) encrypted at rest with additional application-level encryption
OAuth tokens encrypted before storage

Data Isolation

Complete tenant separation—your data is never accessible to other accounts
Each GHL location operates as an isolated environment
Database-level access controls enforce strict boundaries

Access Controls

Role-based permissions (Admin, Manager, Closer, Originator, Viewer)
Granular control over who can view, edit, or submit deals
All access logged for audit purposes

Secure by Design

Authentication

Secure session management
OAuth 2.0 integration with Google and Microsoft for email connections
No password storage for integrated accounts

Monitoring & Logging

Comprehensive activity logging
All user actions tracked with timestamps
Audit trail for compliance and accountability

Secure Development

Regular security reviews of code
Dependency vulnerability scanning
Secure API design with input validation

Incident Response

Ongoing commitment to security

Documented incident response procedures
Prompt notification of any security events affecting your data

Data Retention

You control your data

Export or delete your data at any time
Clear data retention policies
Secure data deletion upon account termination

Security Is a Partnership

We provide the secure platform—here's how you can help protect your data:

Use strong, unique passwords for your GHL account
Review team member access regularly
Disconnect unused email integrations
Report any suspicious activity immediately

Security FAQs

Where is my data stored?

Your data is stored in secure US-based data centers through our infrastructure partners Supabase and Railway.

Do you have SOC 2 certification?

Our infrastructure providers (Supabase) maintain SOC 2 Type II certification. NextLevel MCA is working toward our own certification as we scale.

Can I export my data?

Yes. You can export your deals, lenders, and advances data at any time.

What happens if there's a security incident?

We have documented incident response procedures and will notify affected customers promptly in accordance with applicable regulations.

Who has access to my data?

Only authorized NextLevel MCA personnel with a legitimate need, and access is logged. We never share your data with third parties except as required to provide the service.

Have Security Questions?

We're happy to discuss our security practices in detail.

legal@nextlevelmca.com