Security & Data Protection at MyGrover

Protecting What Matters Most

At MyGrover, we understand that your agency’s data is one of its most valuable assets.

For decades, our founders have worked in the employee benefits and insurance industry. We’ve seen firsthand the trust that employers, brokers, and clients place in their advisors, and we know that protecting sensitive information is not simply a technology requirement. It is a business responsibility.

That’s why security is built into every layer of MyGrover.

From data encryption and secure authentication to monitoring, backups, and disaster recovery planning, MyGrover is designed to help safeguard the information your agency relies on every day.

Built on Microsoft’s Trusted Azure Platform

MyGrover is hosted on Microsoft Azure, one of the world’s leading cloud platforms. Azure provides enterprise-grade physical, network, and infrastructure security that helps protect customer data around the clock.

By leveraging Microsoft’s global cloud infrastructure, MyGrover benefits from multiple layers of protection designed to support confidentiality, availability, and reliability.

Encryption Protects Your Information

Data Encryption at Rest

All sensitive data stored within MyGrover is protected using industry-standard encryption technologies. Encryption helps ensure that stored information remains inaccessible to unauthorized parties.

Data Encryption in Transit

Data transmitted between users and the MyGrover platform is protected through secure encrypted connections. This helps safeguard information while it travels across the internet.

Secure Key Management

Encryption depends on protecting the keys used to secure data. MyGrover utilizes secure key management technologies to help safeguard encryption keys, certificates, and application secrets.

Strong Authentication and Access Control

Multi-Factor Authentication

MyGrover supports Multi-Factor Authentication (MFA), providing an additional layer of account protection beyond a username and password.

Even if a password becomes compromised, MFA helps prevent unauthorized access by requiring a second form of verification.

Role-Based Access Controls

Not every user needs access to every piece of information.

MyGrover utilizes role-based permissions that enable organizations to control access based on job responsibilities. This helps ensure users only have access to the information necessary to perform their work.

Secure User Management

Administrative controls allow organizations to manage user access, permissions, and account security throughout the user lifecycle.

Proactive Security Monitoring

Security requires more than prevention. It requires visibility.

MyGrover continuously monitors platform activity to help identify unusual behavior, suspicious access attempts, and potential security threats.

Our monitoring capabilities help detect:

• Repeated failed login attempts

• Unusual access patterns

• Unauthorized permission changes

• Potential brute-force attacks

• Other indicators of suspicious activity

Security events can be investigated quickly and appropriate actions taken when necessary.

Audit Logging and Accountability

MyGrover maintains audit logs of critical activities throughout the platform.

These logs help provide visibility into account activity, administrative actions, and system events while supporting security investigations and operational oversight.

Backup and Disaster Recovery

Automated Data Backups

Client information is regularly backed up using secure and encrypted storage technologies.

Maintaining multiple backup generations helps protect against accidental deletion, corruption, ransomware, and other unexpected events.

Business Continuity Planning

We understand that agencies depend on access to information when serving their clients.

MyGrover maintains disaster recovery and business continuity procedures designed to support recovery and minimize disruption in the event of an unexpected incident.

Recovery Testing

Backup systems and recovery procedures are periodically reviewed and tested to help ensure data can be restored when needed.

Continuous Security Improvement

Cybersecurity is constantly evolving, and so are we.

MyGrover follows ongoing security practices that include:

• Security updates and patch management

• Vulnerability assessments

• Infrastructure reviews

• Threat monitoring

• Security best-practice evaluations

Our commitment is to continuously improve our security posture as technology and threats evolve.

Shared Responsibility

Technology alone cannot protect data.

Every user plays an important role in maintaining security by:

• Using strong, unique passwords

• Enabling Multi-Factor Authentication

• Keeping credentials private

• Reporting suspicious account activity

• Following internal security policies

Together, these practices help strengthen the overall security of your organization.

Our Commitment to Trust

MyGrover was built by insurance professionals who understand the responsibility that comes with handling sensitive client information.

Security is not a checkbox. It is an ongoing commitment.

We are dedicated to protecting your data, supporting business continuity, and maintaining the trust that agencies, employers, brokers, and clients place in us every day.

Because when you trust MyGrover with your information, protecting that trust becomes our responsibility.