Skip to main content
Folk CRM logo

Folk CRM

Based exclusively on public evidence • 20 criteria (Privacy + AI)
Last review: 21 Feb 2026

C-
AITS IA

AI Trust Summary

AI Training
NO — explicit policy
Data Retention
Not specified in documentation
Opt-out
Implicit opt-out (company does not train with data)
AIPrivacy
C-
BasePrivacy
B-
  • In AI: it does not document how automated decisions are made, which can generate distrust among users.
  • In Privacy Base: it identifies data recipients, increasing clarity on information sharing.

Attention Points in AI (3)

AI criteria that require attention. Buy the Premium Analysis to see all 3 criteria.

  • Folk CRM
  • Does not specify how long AI-generated data is retained, which creates uncertainty.
  • Omission of ethical AI principles can affect user trust.
  • Requires a clear retention clause and commitment to AI ethics.

AI data retention (prompts and responses) is not disclosed

The policy does not specify how long AI-generated contact data, sales interactions, and customer history are retained, which can create uncertainty for users.

Ethical AI principles and anti-bias measures not documented

The absence of commitments to ethics in the use of AI can generate risks of discrimination and bias in automated decisions, affecting user trust.

Automated AI decisions have no explanation available

The lack of explanations about how automated decisions are made can generate distrust among CRM users, who do not understand the criteria used.

Source: vendor public documents

Compliances in AI (3)

AI criteria the company meets. Buy the Premium Analysis to see all 3 criteria.

  • Folk CRM
  • The policy connects data categories with their specific purposes.
  • Provides specific data retention periods, ensuring transparency.
  • These practices facilitate due diligence and increase user trust.

Policy on data use for AI training clearly stated

The company states that it does not use contact data, sales interactions, and customer history to train AI models, ensuring greater privacy for users.

AI training opt-out control available

As there is no use of data to train AI, all users have an implicit opt-out, which represents full protection against this use.

Use of artificial intelligence clearly disclosed in policies

The policy states that Folk CRM uses AI in its functionalities, increasing transparency about how data is processed.

Source: vendor public documents

Highlights in Privacy (3)

Most relevant criteria for this category. Buy the Premium Analysis to see all 3 criteria.

Sensitive data processing without additional documented safeguards

The policy does not mention sensitive data or specific safeguards, which can generate privacy and compliance risks.

Data controller and processor roles clearly defined

The policy clearly identifies Folk CRM as responsible for data processing, which is essential for legal compliance.

Data controller identity and contact clearly disclosed

The policy mentions Folk CRM as responsible, but lacks complete information such as legal name and address, which can make communication difficult.

Source: vendor public documents

Critical Alerts

  • Decisões automatizadas por IA não têm explicação disponível: A transparência nas decisões automatizadas é fundamental para a confiança dos clientes no CRM..
  • Princípios de IA ética e medidas anti-viés não documentados: A falta de princípios éticos pode impactar negativamente a reputação da Folk CRM no mercado.

Conformance analysis (20)

Premium Feature
AITS Criterion 1
Non-compliant

Retention of AI prompts and responses without a defined period

Reference: ISO/IEC 42001 (8.2) + ISO/IEC 27701 (7.4.6)

AITS Criterion 2
Compliant

Data usage policy for AI training declared

Reference: ISO/IEC 42001 (8.2) + ISO/IEC 23894 + EU AI Act

AITS Criterion 3
Compliant

Opt-out control for AI training available

Reference: ISO/IEC 42001 (8.3) + ISO/IEC 29100 + EU AI Act

Source: vendor public documents

Follow this company and access all 20 criteria

Track score changes, get alerts on policy updates, and view the full conformance analysis

Sign up free

Don't miss any update

Sign up to follow this company and track changes in privacy and AI scores

Sign up free

Why trust the AITS Index: Open Community Audit

Public transparency, peer review and open evidence trails — all verifiable by the community

Trust guarantees

Peer review

users, professionals and experts confirm or contest items online.

Public history

vendor and index changes are versioned and accessible.

Participate

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Understanding Privacy and Security in Folk CRM: A Comprehensive Audit

Privacy Strength: Clear Data Processing Purposes

Folk CRM excels in transparency regarding the purposes of data processing. The software clearly lists the categories of data it collects and how that data will be used. This is crucial for users who want to understand what personal information is being processed and for what reasons. A clear understanding of data processing purposes helps users comply with regulations like the GDPR and LGPD, ensuring they are aware of their rights regarding data usage.

Privacy Strength: Defined Data Retention Periods

Another strength of Folk CRM is its commitment to informing users about data retention periods. Knowing how long data will be stored is essential for users who wish to manage their data privacy effectively. This feature aligns with best practices outlined in ISO 27701, which emphasizes the importance of data minimization and retention policies. Users can feel more secure knowing that their data will not be kept indefinitely without their consent.

Privacy Weakness: Undefined Retention of AI Prompts and Responses

Despite its strengths, Folk CRM has notable weaknesses, particularly concerning the retention of AI prompts and responses. The absence of a defined retention period for this data raises concerns about user privacy and data management. Users should be aware that this could lead to potential data overload and misuse. To mitigate this risk, users should regularly review and delete unnecessary AI interactions to maintain control over their data.

Privacy Weakness: Lack of Explanation for Automated Decisions

Another significant concern is the lack of documentation explaining how automated decisions are made by the AI. This lack of transparency can lead to distrust among users, especially those who are sensitive to how their data is utilized. Users should consider requesting more information from Folk CRM regarding their AI decision-making processes. Engaging with customer support can provide clarity and help users understand the implications of automated decisions on their data privacy.

Practical Guidance: Settings to Check for Enhanced Privacy

To enhance privacy while using Folk CRM, users should take advantage of the settings available within the platform. It is advisable to review the data sharing settings and ensure that only necessary information is shared with third parties. Users should also enable any available features that allow them to control their data, such as opting out of data retention for AI interactions. Regularly checking these settings can help users maintain a higher level of privacy.

Practical Guidance: Exploring Alternatives and Precautions

Given the identified weaknesses, users may want to explore alternative CRM solutions that offer stronger privacy features, particularly in AI governance. Additionally, users should stay informed about their rights under GDPR and LGPD, which empower them to request data deletion or modification. Taking proactive steps, such as using data encryption tools and regularly auditing data access logs, can further enhance privacy protection while using Folk CRM.

Other Sales CRM software

Dive into in-depth research and analysis of each player

Source: vendor public documents

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Scope & Limitations

TrustThis/AITS assessments are based exclusively on publicly available information, duly cited with date and URL, following the AITS methodology (privacy & AI transparency).

The content is indicative in nature, intended for screening and comparison, not replacing internal audits.

TrustThis/AITS does not perform invasive tests, does not access vendor technology environments and does not process customer personal data. Conclusions reflect only the vendor's public communication at the date of collection.

Source: vendor public documents