Hi Antony, having a client’s Clay account connected to their CRM is a common, best practice.
In case something goes wrong, their account is their property.
Depending on your client’s concerns, it is best to talk to someone in the legal team at Clay so they can forward concrete data about data protection.