Four things: every lead captured automatically from forms, calls, ads and WhatsApp, one pipeline your team actually updates, follow-up reminders, and reports on customers and cost by source. Choose the tool with the least friction, and add AI features only once that data is real.
A small business's first CRM needs to do four things well: capture every lead automatically from forms, calls, ads and WhatsApp; hold one shared pipeline with honest stages; remind people to follow up; and report how many customers each source produces and at what cost. Everything else, AI features included, is worth paying for only once those four work. The tool your team will actually feed beats the one with the longest feature list.
A CRM only works if the team feeds it, so the first selection test is friction, not features. Here is what to insist on, what to ignore, and how to tell at 90 days whether it is working.
- of 2,241 US companies answered a web lead within an hour (HBR, 2011)
- 37%
- of 2,241 US companies answered a web lead within an hour (HBR, 2011)
- never answered the lead at all
- 23%
- never answered the lead at all
- average response time among firms that replied within 30 days
- 42 hours
- average response time among firms that replied within 30 days
- likelier to qualify a lead contacted within an hour than one left for 24 hours or more
- 60×+
- likelier to qualify a lead contacted within an hour than one left for 24 hours or more
01
Pick for friction, not features
Every field a salesperson has to type is a field that gets skipped on a busy day. Before comparing features, ask three questions of each CRM. Can a lead arrive, be assigned and trigger a reminder without anyone typing? Can a salesperson update a deal from a phone in seconds? Can you see this week's overdue follow-ups on one screen? If not, extra features will sit on top of empty records.
Speed is what the evidence rewards. When the authors of a 2011 Harvard Business Review study sent test web leads to 2,241 US companies, only 37% replied within an hour and 23% never replied; among firms that replied within 30 days, the average response took 42 hours. A separate analysis of 1.25 million leads found that firms which tried to contact a lead within an hour were more than 60 times as likely to qualify it as firms that waited 24 hours or longer.
Our research shows that most companies are not responding nearly fast enough.
02
The four things to insist on
Use a free trial to test each requirement with real enquiries, not the vendor's demo data.
| Requirement | What good looks like | How to test it in a trial |
|---|---|---|
| Automatic capture | Web forms, ad lead forms, WhatsApp chats and calls create a lead with its source, without typing | Send a test enquiry through every channel and time how long each takes to appear |
| One honest pipeline | Five to seven stages that match how you actually sell, each with a clear exit rule | Move ten real deals through it with the team watching |
| Follow-up reminders | Every new lead gets an owner and a dated next step automatically | Leave a test lead untouched and see who is reminded, and when |
| Source reporting | Leads, customers and revenue by source, every month | Ask for last month's test leads broken down by channel |
Two extras are worth insisting on: a mobile app good enough to update a deal between meetings, and easy export, so your data is never trapped. Free tiers make the trial cheap; Zoho CRM's free edition, for example, covers up to three users. Source reporting is also what turns budget decisions from guesswork into arithmetic; see how to split a small marketing budget.
03
WhatsApp, calls and ads: get every lead in without typing
Look for the leads that never reach a system today: a WhatsApp chat on someone's personal phone, a missed call nobody logged, a Facebook lead form that only emails the owner. Fix those channels before you judge the software.
For WhatsApp, that means moving enquiries onto the WhatsApp Business Platform, connected to the CRM directly or through a provider, so every chat creates or updates a record. The costs are predictable. Since 1 July 2025 Meta has charged per delivered message rather than per conversation. Free-form replies within 24 hours of a customer's message are free, and so are utility templates, such as confirmations and reminders, sent inside that window. Marketing templates are charged except inside the free window that opens when you reply to someone who messaged you from a click-to-WhatsApp ad, and Meta raised its India marketing rate from 1 January 2026, the same day it launched billing in rupees for eligible Indian businesses.
For calls, use a virtual number or call-tracking service that logs every incoming call, answered or missed, against a lead. For ads, connect Meta and Google lead forms to the CRM so the source arrives with the lead. Our no-code automation guide covers the connectors.
04
AI features: useful, but last in the queue
Mainstream CRMs such as Zoho, HubSpot and Freshworks now build AI into their products, for drafting follow-up emails, pulling insights from calls and records, and scoring or predicting which leads will convert. It can save time. But a lead score is only as good as the records underneath, and a score built on three months of half-filled fields is a guess with a decimal point.
Before paying for it, check which tier includes the feature you saw in the demo, since AI often sits on higher tiers or is sold as an add-on, and test it on your own records rather than sample data.
05
Plan for India's data protection rules now
For many small businesses the CRM becomes the main store of customer personal data, so it is where India's new privacy rules will bite. The Digital Personal Data Protection Rules were notified on 13 November 2025, and most obligations take effect 18 months later, on 13 May 2027. Days later, IT minister Ashwini Vaishnaw said the government would shorten that window, so check the current deadline before you plan. Among the obligations:
- Security safeguards such as encryption or masking, access controls, logging and monitoring, and backups, with logs kept for a year.
- Contracts with processors: vendors that process personal data on your behalf must be bound by contract to maintain those safeguards, so ask your CRM vendor for its data processing terms.
- Breach reporting: affected people must be told promptly, and the Data Protection Board must receive a detailed report within 72 hours.
- In practice: pick a CRM with role-based access, an audit log, and easy export and deletion, and record how each lead's consent was captured.
06
Judge it at 90 days by one number
Ninety days after go-live, count the leads that came in and the share that got a documented follow-up: a call, message or email logged against the record. Our rule of thumb is that anything under 90% means the system is too hard to use. Simplify before you blame the team: fewer fields, fewer stages, more automation on capture.
Week 1
Connect every channel
Forms, ad lead forms, WhatsApp and call logs flow in with their source. Test each one.
Weeks 2 to 4
Run one pipeline
Agree the stages and exit rules. If a deal is not in the CRM, it does not exist.
Month 2
Switch on reminders
Every lead gets an owner and a dated next step. Review overdue follow-ups weekly.
Month 3
Add reporting and light automation
Monthly source reports, simple follow-up sequences and, only if the data is clean, AI features.
Day 90
Count documented follow-ups
Below 90%? Simplify the tool before blaming the team.
Before you sign up
- Map every channel leads arrive through today, personal WhatsApp numbers included.
- Shortlist two CRMs and trial both with real enquiries for two weeks.
- Test capture, assignment and reminders without anyone typing.
- Confirm the price of the tier you actually need, AI features included.
- Check export, deletion, access controls and the vendor's data processing terms.
- Set the 90-day follow-up target before go-live.
Sources
Facts current as of 16 January 2026.