CRM

Which system should be your source of truth?

By Tumai Meroiti · 26 August 2026

Listen instead

Narration not recorded yet

A brokerage should have one named system of record for each type of information, not force every record into one application. Use the CRM for relationships and pipeline, the aggregator or lodgement system for application truth, accounting for financial records and a governed knowledge base for SOPs. Link them through clear ownership and conflict rules.

TL;DR

  • “One source of truth” means one authority per data domain, not necessarily one piece of software.
  • The CRM can be the operating spine without replacing the aggregator, accounting system or secure document process.
  • Every field needs an owner, an authoritative system and a rule for resolving disagreement.
  • An internal knowledge base should combine searchable text, short videos, checklists, owners and review dates.
  • Markdown is a useful portable source format, but access control and governance matter more than the file extension.
  • Clean, exportable records can support due diligence; they do not guarantee a higher business valuation.

Growth exposes every unclear record

When one broker holds the context in their head, two systems can disagree and the work may still get done. Add a virtual assistant, loan processor, marketing coordinator or second broker, and the disagreement becomes operational.

The team needs to know where to look, and which record wins.

One operating spine, several authorities

Trying to make one application authoritative for everything creates a different problem. A CRM is not necessarily the lodgement record. An aggregator is not necessarily the best place for marketing consent or referral follow-up. An accounting package is not the client conversation timeline.

Choose one authority for each domain.

Where truth lives4 authorities

CRM

Operating spine

  • Aggregator or lodgement platform

    The submitted application and lender workflow.

  • Approved secure document system

    Access, transmission and retention controls for supporting evidence.

  • Accounting and reporting

    Governed financial records, reconciliation and cash flow.

  • Governed knowledge base

    SOPs, policies and training — how the team actually operates.

The CRM is the home screen, not the container. Each authority keeps its own job, and the spine links to them rather than copying them — which is the opposite of collapsing four systems into one database.
Recommended authority for each data domain, and the reason it sits there
Data domainRecommended authorityWhy
Person, contact preference and relationship historyCRMFollows the person across enquiries and post-settlement contact
Deal, owner, next action and pipelineCRM opportunityFollows one finance scenario without overwriting the person
Application and lodgement recordAggregator or approved lodgement platformClosest to the submitted credit process and lender workflow
Supporting documentsApproved secure document systemApplies access, transmission and retention controls
Business income, expenses and cash flowAccounting and reporting systemProvides governed financial records and reconciliation
Commission and trail recordsAuthoritative commission or aggregator statement sourceSupports reconciliation of settled and recurring income
TasksChosen operating task queueGives each action an owner and a due state
SOPs, policies and trainingGoverned knowledge baseMakes the method searchable, reviewable and teachable
Identity and accessIdentity provider and user directoryControls who can reach the other systems

What belongs in the CRM?

Put information there when the team needs it to manage the relationship or the next action. That usually includes:

  • contact identity and preferred communication;
  • source and referral relationship;
  • consent and suppression state;
  • opportunities and pipeline milestones;
  • current owner and next task;
  • appointment and communication history;
  • high-level scenario fields approved for the CRM;
  • document-request status, not necessarily document contents;
  • settlement and review dates; and
  • links or IDs for authoritative records elsewhere.

Do not turn a marketing CRM into an uncontrolled copy of every payslip, identity document, tax return, lender note and application field. The product boundary for sensitive finance and identity data is an implementation question that must be settled before live use.

What happens when systems disagree?

The answer should be written before the first integration is built.

1. Identify the field and domain

“Client details disagree” is too broad. Name the exact field: mobile number, loan amount, application status, settlement date, marketing consent or annual-review date.

2. Apply the authority rule

  • current phone and contact preference: CRM, after client confirmation;
  • submitted loan amount: the lodgement platform;
  • settled date: the authoritative settlement or commission source defined by the brokerage;
  • consent withdrawal: the consent record and suppression system;
  • monthly recurring revenue: accounting or an approved reporting source, not opportunity value.

3. Check freshness and provenance

Record source, changed date and changed-by value where the system supports it. A more recent value from an unreliable import should not silently defeat an approved record.

4. Resolve through a person when risk is material

Identity, financial, consent and application conflicts require review. Do not build a two-way sync that repeatedly overwrites each system with the other.

5. Correct the cause

If a mismatch repeats, fix the mapping, workflow or ownership rule. Do not create a permanent weekly task to repair the same integration failure.

Integration is not automatically improvised

Connecting systems can be sensible when each has a clear job.

The weak version is an undocumented chain of API keys, personal accounts, spreadsheets and automation steps that nobody owns. The strong version has:

  • a field map;
  • a named owner;
  • one direction of authority per field;
  • error alerts;
  • retry and duplicate rules;
  • test records;
  • a change log; and
  • a manual fallback.

The broker should not need to become an integration developer. They do need a map of what the integration is allowed to do.

Build an internal internet for the team

A database of client records is not a knowledge base.

The internal knowledge system explains how the team operates: how to create and progress an opportunity, how to request and verify documents, how to prepare a file for broker review, how to handle privacy, consent and opt-outs, how to escalate exceptions, how to use each core system, and how to recover when a workflow fails.

Do not use video alone

Screen recordings are useful for showing movement and judgement. They also become hard to search and easy to outdate.

Give every SOP:

  • a direct title;
  • purpose and scope;
  • an owner;
  • a last-reviewed date;
  • a trigger;
  • inputs and permissions;
  • numbered actions;
  • a completion condition;
  • an exception and escalation path;
  • a short video where movement matters;
  • a transcript or written summary; and
  • links to the current system screens and templates.

A course builder can present SOPs as structured lessons for staff. Keep the canonical text and ownership visible, so a course is not mistaken for an unchangeable archive.

Should the knowledge base use Markdown?

Markdown is a strong portable source format. It is plain text, searchable, version-friendly and readable by many AI and documentation tools. It can make an internal reference easier to export, compare and update.

It is not mandatory for AI, and it is not a security control.

Event chain3 steps
  1. Governed source files
  2. Searchable staff interface
  3. Permission-aware AI access
The source can be Markdown while the staff experience is a website, course, portal or knowledge tool. Do not expose client information to an AI simply because the file is easy to read.

The source-of-truth register

Create one register and make it part of onboarding. Replace the examples below with your actual systems and legal requirements.

Source-of-truth register6 domains
One row per domain, and a conflict rule written before the first integration exists. The rule is the part teams skip, and the part that decides what happens at 4pm on a settlement day.
Data domainAuthorityOwnerIdentifierWhen systems disagree
ContactsCRMOperations leadContact IDThe client-confirmed CRM value wins
OpportunitiesCRMBroker or processorOpportunity IDThe most recent verified event wins
ApplicationsAggregator or lodgementBrokerApplication IDThe submitted record wins
DocumentsSecure document processOperations or complianceDocument or file IDThe approved file version wins
FinanceAccountingFounder or bookkeeperAccount and transaction IDThe reconciled ledger wins
SOPsKnowledge baseProcess ownerSOP ID and versionThe current approved version wins
One row per domain, and a conflict rule written before the first integration exists. The rule is the part teams skip, and the part that decides what happens at 4pm on a settlement day.

Make portability real

“We can export” is not an exit plan until the export has been examined.

  1. export a safe sample or approved backup;
  2. confirm contacts, opportunities and required custom fields are present;
  3. document what is absent, truncated or only available through another method;
  4. test how records would be reconstructed;
  5. protect the export with access, encryption and retention controls; and
  6. delete superseded copies when they are no longer required.

HighLevel’s published contact export includes selected standard fields, tags and custom fields, but excludes some history and may truncate long notes. That is exactly why a vendor’s Export button should not be assumed to capture the whole operating record.

OAIC guidance treats inadequate backups as a possible form of information loss, while also requiring entities to consider destruction or de-identification when personal information is no longer needed. Backup and retention rules have to work together.

Does this affect business value?

Reliable records can make a brokerage easier to understand during planning, finance, succession or due diligence.

They may help an adviser examine recurring commission or trail records, client and loan-book composition, revenue concentration, process dependence on the founder, data quality and consent, staff responsibilities, contractual and platform dependencies, and the cost and risk of transferring operations.

That does not prove the business will receive a higher valuation. Valuation depends on the quality, rights, risks, transferability and economics of the business, and should be handled by an appropriately qualified adviser.

The system’s job is to make the evidence inspectable, not to create a valuation claim.

The practical build order

  1. List the ten records your team uses most.
  2. Assign each record to a data domain.
  3. Name the authoritative system and owner.
  4. Decide how other systems may read or update it.
  5. Write the conflict rule.
  6. Document the core process as text, with a short video where it helps.
  7. Test export and recovery with approved non-production or controlled data.
  8. Train one staff member using only the documented method.
  9. Fix every point where they still had to ask where the truth lives.

The standard to use

One authority per question.

Use the CRM as the operating spine, the aggregator as the application authority, accounting as the financial authority, and a governed knowledge base as the method authority.

The team can then scale the process without asking the founder to reconcile every screen.

Common questions

Should the CRM be the source of truth for everything?
No. It can be the main operating view while other systems remain authoritative for lodgement, secure documents, accounting, identity or other specialist records.
Can a spreadsheet be the backup?
A controlled export may support recovery or migration, but an ad hoc spreadsheet containing client data creates another sensitive copy. Define access, encryption, retention, owner and recovery use before treating it as a backup.
Is Markdown required for AI agents?
No. It is a useful portable format because it is plain, structured and version-friendly. AI access still needs source quality, permissions, retrieval rules and protection of personal information.
What if the CRM and aggregator show different application stages?
The aggregator or lodgement platform should govern the submitted application event, while the CRM governs the team’s operating stage. Reconcile them through a defined mapping and an exception queue, rather than pretending the labels are identical.
Will better systems increase the value of a brokerage?
They may make evidence and transferability easier to assess, but they do not guarantee a valuation outcome. Obtain specialist valuation, legal, tax and commercial advice.

Sources

Everything this article relies on. If a claim above is not traceable to something here, treat it as opinion and tell us.

  1. ASIC — RG 273: records demonstrating mortgage-broker compliance (PDF)
  2. OAIC — APP 11: security of personal information
  3. OAIC — Guide to securing personal information
  4. HighLevel — Export contacts to CSV (vendor documentation)
  5. ATO — Electronic record-keeping guidance (TR 2005/9, PDF)