Trust & privacy
Built for the most private conversations you have.
Coaching runs on candor. A client tells you things they've told no one else - and that only works if they never have to wonder where it goes. Croft is designed so nothing leaves the room by accident, and so the honest path is the easy one.
Your account, your data
You own the data. All of it.
Croft runs on your own Google Workspace. Every summary and transcript is a Doc in your own Drive, and the client's record belongs to the client. Nothing is routed through a third-party cloud to be stored.
In your Google Drive
Drive / Coaching / Avery R.
2026-07-14 · Session summary.doc
2026-07-14 · Transcript.doc
Ownership
The client owns their record. You decide what they're able to see.
No middle-man
No separate storage cloud sits between you and your client.
Share summary
Avery R. - can view
Anyone with the link
Off
Status
Waiting for your review before it sends.
Sharing is a decision, not a default
Nothing reaches a client until you say so.
Documents are shared per person - never "anyone with the link." A client receives their summary and follow-up only after you've approved it, unless you've deliberately turned on auto-send for that specific client.
- Every document is shared with named people - never a public link.
- Follow-ups wait for your review before they ever reach a client.
- Prefer it hands-off? Turn on auto-send per client - your call, one client at a time.
How sessions are handled
Sensitive by design, from capture to note.
Sensitive disclosures stay out
The follow-up email is always sanitised of sensitive disclosures. And you control, per client, what's allowed to appear in the long-form notes at all.
Encrypted, then gone
Session audio is encrypted at rest and purged on a schedule - kept only as long as it takes to produce your notes, then removed.
Consent once, revocable always
Consent given once. Revocable any time.
Your client consents once, up front, to being recorded across your work together - and can withdraw it at any time. No per-session reminders pulling them out of the moment. You stay responsible for obtaining consent; Croft keeps it informed, ongoing, and easy to revoke.
Consent
Given once · covers your work together.
Revoke any time - one tap, no reminders mid-session.
Honest about where we are
What we don't claim yet.
We're an early-stage product onboarding our first cohort of coaches. We don't yet hold formal certifications like SOC 2 or HIPAA - those are on the roadmap, and we'd rather say so plainly than imply otherwise. What we can do today is tell you exactly how your data is handled, which is what this page is for. If there's something we haven't answered, ask us directly.
Trust is the product
Have a hard question about privacy?
We'll answer it plainly - no legalese, no hand-waving. It's your clients' trust on the line, and ours.