Trust Center
HubIQ holds your payroll, SSNs, claims and client contracts. This is how the application at app.hubiq.com protects them: tenant isolation, encryption, audited access controls and an independent testing record.
Product security
Tenant isolation
Every agency runs in its own isolated tenant. Data, permissions and access are scoped per tenant, with no cross-tenant read or write on any surface, validated by independent testers.
Encryption everywhere
Your data is encrypted in transit with TLS 1.3 and at rest with AES-256, with keys rotated on a strict schedule.
Access you control
Role-based permissions decide who sees clients, branches, margins and payroll data inside your agency. Multi-factor authentication is enforced for platform and admin accounts.
Backups and recovery
US-hosted infrastructure with encrypted, point-in-time recoverable backups, so your history survives anything.
Current status
SOC 2 Type II
Audit in progress
An independent audit covering security, availability and confidentiality is underway. Reports are available under NDA.
ISO 27001 aligned
Aligned
Security controls are modeled on the international information security management standard.
GDPR & CCPA
Program in place
A privacy program covering data subject rights, retention schedules and breach notification.
Penetration tested
June to July 2026
Authenticated grey-box test against OWASP ASVS 4.0.3 Level 2, with a remediation retest completed July 15, 2026.
Audit reports available under NDA
Infrastructure
Application data layer
HubIQ's application data is hosted on Supabase, an enterprise-grade platform with row-level security, encryption at rest and isolated backups.
Analytics warehouse
Reporting and AI workloads run on Snowflake, with per-tenant data separation and enterprise-grade access controls.
US hosting
All production infrastructure is hosted in the United States with encrypted, recoverable backups.
Questions
Ask anything about how HubIQ handles your data, request reports under NDA, or book a walkthrough of the controls in the product.