About ShadCRM

The CRM industry has become a tax.

Subscriptions creep. Features paid for today get moved up a tier next quarter. Every new seat doubles the bill. Every new “AI copilot” nobody asked for shows up in the sidebar with a new line item to match. “Unlimited” always has a footnote.

Your pipeline sits in plaintext on someone else's servers. The vendor's own staff has read access to every deal. The lead brokers flooding your inbox are, half the time, selling you back your own contacts with the names slightly mangled.

Meanwhile the industry is busy being “the operating system for work,” or “the Notion of sales,” or whatever positioning gets the next round. Nobody is shipping a CRM. They are shipping pitch decks with a CRM strapped on.

So we built ShadCRM.

Your data is a SQLite file on your machine. The sync relay is end-to-end encrypted and couldn't read your pipeline if we tried. The price on the download page is the price. No AI copilot upsell, no data-broker partnerships, no “starter tier” that silently loses features. It's a CRM. That's it.

Your CRM lives in a local SQLite database inside the desktop app. Everything — contacts, deals, tasks, invoices, meeting recordings — is written to disk encrypted with AES-256-GCM using a workspace master key that only your devices hold.

When you add a second device, the two devices perform an authenticated X25519 key exchange signed with their Ed25519 identity keys. The master key is transferred device-to-device, never through our infrastructure.

The sync relay — a Cloudflare Worker — receives already-encrypted blobs keyed by device public key, stores them, and forwards them to your other devices. It has no ability to decrypt anything it holds. If we received a valid subpoena tomorrow, we could only hand over ciphertext. We couldn't help even if we wanted to.