Encryption at rest
Sensitive tenant data, chief among it the credentials behind carrier SFTP integration, is encrypted at rest using AES-256-GCM envelope encryption. Each secret is encrypted with a per-record data key, which is itself wrapped by a master key.
The master key lives only in deployment environment variables. It is never stored in the database alongside the data it protects, so a database snapshot on its own does not expose encrypted credentials.
- ✓ AES-256-GCM authenticated encryption
- ✓ Envelope scheme with per-record data keys
- ✓ Master key held only in deployment env, never in the DB
Tenant isolation
AgencyGrid is multi-tenant, and isolation is enforced at the query layer rather than left to application discipline. Every tenant-scoped query goes through a single chokepoint that pre-binds your organization’s id, so a query can only ever see its own organization’s rows.
Tenant tables are not queried directly. Because isolation is centralized in one place, there’s no scattered per-query filtering to forget: one agency’s book, agents, and commissions stay invisible to every other agency.
Audit logging and access
Sensitive actions are recorded in an append-only audit log, the backbone of insurance agency compliance. In particular, staff impersonation of a user and access to PHI are written to that log, which is designed so entries are added, never edited or deleted, giving a durable record of who did what.
Access is role-scoped: agents, managers, and administrators see the slice of the agency hierarchy their role permits, and elevated actions like impersonation are both gated and logged.
- ✓ Append-only audit_logs: records added, not rewritten
- ✓ Impersonation and PHI access recorded explicitly
- ✓ Role-scoped access across agents, managers, and admins
Secrets and where we’re headed
Credentials for infrastructure (the encryption master key, database, storage, email, and billing) live in deployment configuration, separate from tenant data. Authentication is handled by a dedicated auth layer rather than hand-rolled.
On honesty: AgencyGrid does not claim formal certifications it hasn’t earned. Independent attestations such as SOC 2 are on the roadmap, not something we assert today. What’s described above is what the platform does now.