Security

Security & Trust

Your clients' data is your livelihood. Here's how we protect it.

Encryption & Authentication

Our hosting platform, Base44, reports that app data is encrypted at rest with AES-256 and in transit with TLS 1.2+. HTTPS is enforced on connected domains, and certificates are issued and renewed automatically.
New client-document uploads use private storage; authorized views and downloads use links that expire after two minutes. Previously public files require separate migration or storage removal.
Sign-in is handled by our platform provider — passwords are hashed, never stored by us in readable form
Google sign-in and email verification are supported. Deliberately public signing links use a record-specific token; new tokens expire after seven days and are consumed on signing.

Accounts belong to a workspace. Invited teammates join the inviting agency after personal acceptance; their permitted access is shared within that workspace.
Row-level security is enforced on the server for leads, clients, policies, commissions, applications and documents
Team plans support admin and agent roles, including restricting who can view commission data
Public links (lead intake forms and application signing links) are limited to a single record and carry no access to the rest of your data

AscendHub runs on managed cloud infrastructure. Platform patching, backup retention and restore guarantees are not independently verified here.
We do not publish an uptime SLA or promise automated downtime notifications.
Payments are processed by Stripe; card numbers never touch our systems or database
Calls and text messages are carried by Twilio, and transactional email by Resend

We never sell your data, and we do not use your client records to train AI models
Export your book to CSV at any time from Settings
Submit an account-deletion request from Profile and check its status there. Identity removal, stored files, billing, shared agency records and required retention need review; submitting is not completion.
Admins on team plans can set retention rules that automatically purge older activity history, audit logs and notifications

We do not claim SOC 2, ISO 27001 or PCI certification — Stripe handles card data under its own PCI compliance
AscendHub supports Life insurance and Property & Casualty exclusively; health insurance, Medicare, and Medicaid are not supported
AscendHub is not offered as a HIPAA-compliant system. Do not store or upload protected health information, medical records, diagnoses, or medication histories, including for life insurance underwriting
You remain responsible for TCPA and state consent requirements when calling or texting through the app
Revised security, agreement, billing, deletion and signing language is draft pending attorney review. No legal-compliance assurance is made, and a DPA or security addendum must be agreed separately.
Existing outstanding application links remain valid until November 17, 2026 unless already used; expired links can be reissued by an authorized agent.
Security questions or a suspected incident? Use the in-app support channel.

We never sell your data. You can export your book or request account deletion from your Profile.