Security & Trust

Your client data is safe with AgencyAssist.

Independent agents trust us with sensitive business information. Here is exactly how we protect it.

🔒 TLS 1.3 Encryption🛡️ AES-256 At Rest💳 PCI-Compliant Payments🌐 SOC 2 Infrastructure📵 Data Never Sold
How we protect your data

Eight layers of protection

🔒

Encrypted in transit and at rest

All data transmitted between your browser and AgencyAssist is encrypted via TLS 1.3. Data stored in our database is encrypted at rest using AES-256 — the same standard used by banks and federal agencies.

🛡️

Row-Level Security on every table

AgencyAssist uses Supabase Row-Level Security (RLS) to enforce data isolation at the database level. Agents can only ever access their own submissions — even if an application bug occurred, another agent's data would be inaccessible.

💳

PCI-compliant payments via Stripe

We never store your credit card information. All payment processing is handled by Stripe, which is certified to PCI Service Provider Level 1 — the most stringent level of certification available in the payments industry.

🤖

Bot and spam protection

Public-facing forms are protected by Cloudflare Turnstile, which blocks automated bots and spam submissions without requiring users to solve frustrating CAPTCHAs.

🌐

Hosted on SOC 2-compliant infrastructure

AgencyAssist runs on Vercel (hosting) and Supabase (database), both of which maintain SOC 2 Type 2 compliance. Your data never touches infrastructure that hasn't been independently audited for security controls.

🔑

Secure authentication

User authentication is handled by Supabase Auth, which supports Google OAuth and email/password sign-in with secure session tokens. Passwords are never stored in plaintext — all credentials are hashed using industry-standard algorithms.

📵

Your data is never sold

AgencyAssist does not sell, rent, or share your client data with third parties. Your intake submissions, ACORD forms, and client information are used only to provide you with the service — nothing else.

🚫

No unnecessary data retention

You control your data. You can delete submissions from your dashboard at any time. When you cancel your account, you can request full data deletion and we will remove your records within 30 days.

Infrastructure

We only use audited, enterprise-grade vendors

Every piece of infrastructure AgencyAssist relies on has been independently audited and certified.

VercelHosting & CDNSOC 2 Type 2
SupabaseDatabase & AuthSOC 2 Type 2
StripePaymentsPCI Level 1
CloudflareBot ProtectionISO 27001
ResendTransactional EmailSOC 2 Type 2
AnthropicAI (underwriting summaries)Enterprise Privacy
Our commitment

What we will never do

Sell your client data to third parties, carriers, or data brokers
Use your submission data to train AI models without your consent
Share your book of business information with other agents or agencies
Retain your data after account deletion (beyond legal requirements)
Send marketing emails to your clients without your permission
Responsible disclosure

Found a vulnerability?

We take security reports seriously. If you discover a potential security issue, please email us directly before disclosing publicly. We will respond within 48 hours and work to resolve confirmed issues promptly.

📧 security@agencyassist.io

Ready to get started?

30-day free trial. No credit card required.

Start free trial →Read our privacy policy