Your email, your CRM, your server.
Radar holds access to genuinely sensitive things: mailboxes, customer records, API credentials and AI-drafted correspondence. Here is exactly how it is handled.
Asked to approve Radar for a company? The security summary lists every permission it asks for and why, and what it reads and writes.
- Microsoft verified publisherNeos Technologies Ltd
- Google-verifiedcalendar access
- ICO registeredZC261269
- Hosted in the UKon servers we control
- Two-factor sign-inowners can require it
- Payments by Stripewe never see your card
- Listed on G2read or leave a review
Run by us, in the UK
Radar runs on servers we control in the United Kingdom. The database is not reachable from the internet, and every request arrives over HTTPS.
Source systems stay authoritative
Outlook owns the message, the CRM owns the deal, Odoo owns the activity. Radar caches to be fast, and writes back only when you take an explicit action.
Credentials encrypted at rest
Provider tokens and API keys are encrypted with AES-256-GCM using a master key held outside the database. Secret values are never returned to the browser. The app only ever learns that a credential is configured.
Organisation isolation
Every record carries its organisation and user. Isolation is enforced in the database queries, not in the interface, and every release runs automated tests that try to read across organisations.
AI suggests. You decide.
Radar sends only the email you opened, a few earlier messages in that thread, the linked opportunity’s headline fields, recent CRM notes and matching company knowledge. It asks OpenAI not to retain the response. It cannot send email, change a deal or create a CRM action without your click.
Two-factor sign-in
An authenticator app and recovery codes, a fresh code before anything sensitive, and an owner can require it of everyone in the workspace.
Radar asks about health and never assumes it
A Health item is kept only with your explicit agreement, and withdrawing it deletes them. Radar never guesses a health matter from a title.
Backups that are actually tested
Nightly encrypted backups include the database, uploaded documents and the encryption key. A scheduled job restores the latest backup into a scratch database every week to prove it works.
Also true
- Passwords are hashed with Argon2id; sessions are server-side, revocable and listed per device
- CSRF protection, rate limiting, strict security headers and a content security policy on every response
- Website and custom-endpoint fetching is protected against SSRF: Radar refuses local and private addresses, including through redirects
- An audit trail records sign-ins, connection changes, AI sends and CRM write-backs
- You can export everything Radar owns about you as JSON or a ZIP with your files, disconnect a provider and purge its cache, or delete your account and workspace outright
- No third-party analytics, advertising or tracking in the app. Product analytics stay in Radar’s own database. This website uses Google Analytics only if you accept it
Put it on your Radar.
Open to anyone. £10 a month at the founding price until 31 March 2027, locked for 24 months, and your money back within 14 days if it isn’t for you.