Is my IHUBApp secure?

Short answer: yes. Security and privacy are built into IHUBApp at the platform level, not added on after the fact. Below is exactly how we protect your Hubsite, your users, and your data, and what you control directly.

Independent security testing

We do not grade our own homework. IHUBApp is reviewed by independent third-party security firms who perform penetration testing and security assessments against the platform. These are outside experts whose job is to try to break in so that they can tell us where to harden before anyone else finds a gap. Testing is ongoing, not a one-time checkbox, because the threat landscape does not stand still and neither do we.

Privacy by design

Privacy is a design principle at IHUBApp, not a policy we wrote to satisfy a form. Every feature is built with the question “what is the least data we need, and how do we protect it” asked at the start. That means the protections your organization would normally have to specify, negotiate, and bolt on are already engineered into the product you are evaluating.

Multifactor authentication, built in

Multifactor authentication (MFA) is part of the registration process on your Hubsite. It is not an upgrade you have to hunt for or pay extra to switch on. Adding a second layer of verification at sign-up is one of the single most effective controls against account compromise, and it is standard on the platform.

You control your users and their permissions

Your Hubsite is yours to administer. You have full control to:

• Manage users directly, without waiting on us.
• Approve or decline who is allowed in.
• Build your own custom permission controls, so each role sees and does only what you decide.

Access control is one of the most common places security breaks down in community and membership platforms. On IHUBApp, that control sits with you, at the level of granularity you set.

PCI compliance

IHUBApp is PCI compliant. Payment card data is handled to the Payment Card Industry Data Security Standard, the same framework that governs how banks and major retailers protect cardholder information. If your Hubsite collects payments, that transaction environment is held to that standard.

Operated across jurisdictions, in line with local law

We operate the platform across different countries so that we can comply with the different legislation that governs data in each region. Where data lives and how it is handled is not an afterthought; it is aligned to the legal requirements of the places our clients operate. If you have a specific residency or regulatory requirement, we can speak to it directly.

You own your data. We never sell it.

This is the one that matters most, so we will be plain about it: you own your Hubsite and you own your data. We do not sell it. Not to advertisers, not to data brokers, not to anyone. Your members, your content, and your information are yours. Our business is providing the platform, not monetizing what your community shares on it. Our commitments here are set out in full in our IHUBApp Privacy Notice.

Where to read the fine print

We would rather you read the actual commitments than take our word for them. Everything above is backed by the documents below:

• IHUBApp Privacy Notice — how your Hubsite collects, uses, protects, and never sells your data.
• InspireHUB Corporate Privacy Notice — how InspireHUB, as a company, handles data.
• Acceptable Use Policy — the rules that keep your Hubsite and the wider network safe.
• Terms of Service — the agreement that governs your use of IHUBApp.

In short

Your Hubsite is protected by independent security testing, privacy engineered in from the start, MFA at registration, full administrative control in your hands, PCI compliance, jurisdiction-aware operations, and a firm commitment that your data is never sold.

Still have a question?

If you have a specific security or compliance question this article did not cover, contact our support team. We are happy to walk through the details.