Security. The straight answer.

The question every broker should ask: "If I install this extension, how do I know it can't leak data out of my CRM?"

Here is the answer. You don't have to take my word for any of it. Every claim on this page is enforced by Chrome itself, or checkable on your own screen in under a minute.

1. Chrome physically blocks it from talking to anywhere else

A Chrome extension can only contact the websites listed in its manifest, a public file that Google reviews and Chrome enforces. This is not a promise. Requests to any other domain are blocked by the browser before they leave your computer.

MyCRM AutoFill's site access list has a single entry: mycrm.finance. That is the CRM it fills in, on your screen, in your browser. You can see this list for yourself on the Chrome Web Store listing before you install.

Beyond that, the extension makes exactly one other network call: a licence check to mycrmautofill.com to confirm your subscription is active. It carries an anonymous install ID and nothing else. No client information is ever included, and you can watch this request happen in your own Network tab.

That is the complete picture. There is no server that receives client data, because there is no path for client data to travel.

2. The code can't change behind your back

The extension is built under Chrome's Manifest V3 rules, which ban downloading or running remote code. The code on your machine is exactly the code Google reviewed when it approved the extension. Every update goes through review again before it reaches you.

3. Your client data stays in your browser

Your notes and client forms are read in your browser and used to fill the MyCRM tab you already have open. That is the end of their journey. Nothing is uploaded. Nothing is stored on our side. There is no AI service in the loop. The extension runs on fixed rules, not a language model.

Check it yourself in 60 seconds

Before installing: the Chrome Web Store listing shows exactly what the extension can access under "Privacy practices". You will see the single entry above.

While it runs: right-click the MyCRM page, choose Inspect, open the Network tab, then run an application. Watch the traffic. You will see the extension typing into MyCRM and, at most, one small licence ping to mycrmautofill.com. That is the whole story, live, on your own screen.

For your aggregator or IT team: send them this page. We are happy to answer any security questionnaire. Email help@mycrmautofill.com.

What we never receive

Client names, contact details, financials, documents, fact finds, broker notes, MyCRM credentials, browsing history. We can't leak what we never receive.

MyCRM AutoFill is independent software built by a former broker. It is not affiliated with, endorsed by, or supported by LMG (Loan Market Group). MyCRM is a product of LMG.