Sutra CRM
For teams of 50–2,500

The CRM for growing teams who own their data.

Self-hosted under GPL v3, customisable to your actual business model, with an audit trail your compliance review will accept. No per-seat punishment, no vendor lock-in, no rent. Community is free forever; Business adds SSO, compliance, and premium support — launch pricing locked in on Early Access.

Community $0 forever · self-hosted · 0 telemetry · email required for demo + download
Early teams running Sutra in production Logos here as partners go public — want your team in the line-up?

Coming from spreadsheets or another CRM?

Switching CRMs stalls when ten years of data don’t come with you. The Sutra importer — column mapping, dry-run preview, error reporting, undo — is on the timeline and ships in 2026. Reserve a Business slot now and we’ll line up white-glove migration when it lands.

See on the timeline
Why growing teams pick Sutra

No per-seat punishment

Community is unlimited users, free forever. Business early-access pricing is locked in for life. Growth doesn’t blow up the bill.

Customisable to your model

Custom entities, fields, and relationships from the admin UI. Your business doesn’t fit the CRM — the CRM fits your business.

Audit your compliance team accepts

Append-only audit, field-level diff, non-destructive restore — in the free tier. 21 CFR Part 11 plugin in Business.

See all features

For regulated industries

Audit-grade by default.

Pharma, medical devices, clinical research, life sciences — teams whose CRM has to survive a regulatory review. Sutra writes an append-only, field-level audit on every save; nothing mutates in place; nothing silently overwrites. Restore any prior save without losing the intermediate history — the restore is itself an audit event. 21 CFR Part 11 capabilities layer on top via the Business compliance plugin.

See the audit capabilities

Append-only audit log

Every save writes a stream event — no in-place mutation, no silent overwrites.

Field-level diff history

Old → new per field, picklist labels resolved, queryable as data.

Non-destructive restore

Restore any prior save without losing history. The restore itself is an audit event.

What’s new

Shipped this month

Full timeline
  1. 28 May 2026 Security

    Country access

    Allow or block sign-in by country, with the lookup running entirely on your server — no third-party service, no API key. Install the free DB-IP country database with one click from Admin → Access; refresh monthly to stay current.

  2. 28 May 2026 Security

    Two-factor authentication

    Add a second step at sign-in. Authenticator-app codes work out of the box with no external service; email and text-message codes are optional channels that plug into the Admin → Integration cards. Each user picks one or more methods, and any of them satisfies the prompt.

  3. 28 May 2026 Integration

    Admin integrations (email + SMS)

    A new Admin → Integration home for outbound channels. Send email through a standard mail relay or Amazon SES, and text messages through Twilio. Each card has a test-send so you can confirm delivery before relying on it.