Your insurance toolkit — built for speed
Tell us your name so we can greet you properly
Help us tailor the experience for your agency
Enter the access code from your team admin to continue
This page explains how the Altech toolkit stores, encrypts, and protects the information you enter. It describes how the application itself is engineered, in plain language first, with the precise technical controls below. It is a description of the build, not an independent audit or a compliance certification.
The client information you enter is encrypted with AES-256-GCM (the same 256-bit standard used to protect sensitive financial and government data) before it is synced to the cloud, and sensitive data is encrypted at rest on this device as well.
With the secure vault enabled, your data is sealed with a key derived from your passphrase, which never leaves your device. The encryption key is never sent to the server, so neither we nor anyone with database access can read your data.
The database enforces per-account isolation at the row level. A signed-in user can never read another user's data; this is enforced by the database itself, not just by app code.
Email and password sign-in with optional two-factor authentication (authenticator app or passkey/security key). Turning on cloud sync prompts for, and ultimately requires, two-factor.
When you're offline your work stays in your browser. Certain secrets (encryption salts, device passkeys, the activity log) are marked never-sync and never leave the device. Exported files (PDF, EZLynx, HawkSoft) are produced in your browser; the plaintext never passes through our servers.
All traffic is HTTPS with strict-transport-security enforced, and every API request passes through hardened middleware (rate limiting, strict browser-security headers, request tracing).
max-age=31536000; includeSubDomains (HTTPS forced for 1 year, all subdomains).default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' (content restricted to the app's own origin).DENY (no clickjacking / framing).nosniff.strict-origin-when-cross-origin.camera=(), microphone=(), geolocation=() (disabled).Last reviewed: May 2026. This describes how the Altech application is built; it is not an independent audit or certification.
Security questions? austin@altechinsurance.com
Sign in to sync your data across devices
Get started with cloud sync for your team
Enter your email and we'll send you a reset link
Aurora is an animated dark theme with northern-lights effects and frosted-glass cards.
Auto-prefixes every HawkSoft log so it's clear who handled the call. Enter exactly as it appears in HawkSoft (middle initial included). Synced across your devices — set once.
One term per line. The HawkSoft Logger will use these to interpret your shorthand notes. Max 500 characters.
For local dev server (npm run dev) only. On production, the import button remembers your last-picked file automatically — no path needed.
Smart features power scanning, extraction, and analysis across the app. A default is provided — add your own key to unlock premium models.
Estimates assume typical usage. Actual costs vary with document length, image count, and response complexity.
Required for accounts with cloud sync. Authenticator apps like 1Password, Authy, or Google Authenticator work.
Your client data will be encrypted before leaving this browser.
This is the ONLY way to recover data if you forget your passphrase.
Grant admin or block accounts. Changes apply immediately.
Use Touch ID, Face ID, or Windows Hello — or enter your passphrase.
Your data stays put — only the wrapping changes.
Paste the 64-character key you saved during setup.
Your vault is unlocked — choose a new passphrase to lock it again.
Move your client data to end-to-end encrypted cloud storage.
Quick identity check before we migrate anything.
This is separate from your login. It encrypts your client data.
This is the ONLY way to recover data if you forget your passphrase.
Don't close this window. Should take under a minute.
Your client data is now encrypted end-to-end.
Nothing has been changed. Your data is still safe in its current location.