How NymbleOne protects your agency's data
Nymble Insurance runs on NymbleOne every day, so our own clients' data is in it too. Here is plainly what the app does today.
Your agency's data stays your agency's
- Every record belongs to an agency, and people only see records from the agencies they've been given access to.
- If you run more than one agency, you choose which people can work in each one.
Who sees what
- Built-in roles, custom roles, and per-person permissions decide who can see and change what.
- Field visibility settings control who can see sensitive details.
Sign-in protection
- Two-factor sign-in is available with an authenticator app or an emailed code, plus recovery codes. An admin can require it for the whole agency.
- Automatic idle sign-out after 30 minutes by default, adjustable per agency.
- Passwords are stored as one-way hashes, never in plain text.
- Repeated failed sign-ins are temporarily blocked.
Sensitive numbers are encrypted
Social Security numbers and driver's license numbers are encrypted in the database. Screens show only the last four digits unless the person has permission to reveal them. All traffic to the website and the app uses HTTPS.
Connected email
If you connect Gmail, NymbleOne can only send the messages you start in the app. It can't read your inbox. Google connection tokens are stored encrypted, and disconnecting deletes them. See our Privacy Policy for details.
A record of who did what
The audit log records changes along with the person who made them, and agency owners can export it.
Support access only with your permission
Nymble staff can't open your agency's data unless an admin at your agency grants time-limited access. That access is read-only, covers one agency, can be revoked at any time, and is logged.
Backups
We back up your agency's core records every night and check that each backup worked.
Texting compliance
Texts can't be sent to a client without consent on file, and STOP and START replies are handled automatically.
Your data if you leave
If you ever leave, we'll export all of your data for you, free of charge.
Questions or a security issue?
If you need a security questionnaire answered, or you think you've found a vulnerability, email hello@nymbleone.com. Please give us a chance to fix an issue before sharing it publicly.