Your renewal data, protected

Yes. RenewalTracker is hosted in a Tier III data center in Irvine, California, and every connection is protected by 256-bit TLS encryption. Only users with valid credentials can sign in, with multi-factor authentication (MFA) included on every plan, plus optional SAML single sign-on (SSO) and sign-in with Google. Your administrator assigns each user's access privileges.

RenewalTracker is hosted in a Tier III data center in Irvine, California, certified to SOC 2 Type II and ISO 27001. Customer data is stored on servers within the United States, and encrypted backups are kept offsite in a second data center in Phoenix, Arizona.

Yes. Every connection between your browser and RenewalTracker is protected by 256-bit TLS encryption, and customer data is encrypted at rest with AES-256.

Yes. Every plan includes multi-factor authentication with a one-time passcode by email. Single sign-on (SSO) and enhanced MFA through Cisco Duo — including bringing your own Duo account — are available as options.

Only users your administrator creates. Access is role-based: you can create full users, view-only users and notification-only users, and custom roles control what each person can see and change.

Yes, for items. RenewalTracker records who changed each item, what changed and when, and keeps email logs as proof that reminders were sent.

Yes. Automatic full backups every night, plus incremental copies every four hours. Encrypted backups are also kept for 30 days offsite, in a second data center.

RenewalTracker commits to 99.9% uptime.

Yes. You can export your items, contacts and reminders to Microsoft Excel at any time. If your subscription ends, ask us for a copy of your data within 60 days and we will provide it; we send a final notice before anything is deleted. 60 days after a subscription ends, all of its data is permanently deleted from RenewalTracker, and it leaves our backups within a further 30 days.

Yes, for customers on a custom subscription, beyond the Basic and Basic Plus plans. Contact us to talk about your organization's requirements.

No. RenewalTracker is not SOC 2 certified. For customers on a custom subscription, we complete security questionnaires.

A data processing agreement is being prepared. Contact us if your organization needs one.

RenewalTracker doesn't use AI today. Optional AI features are planned for the new RenewalTracker, scheduled for release in the first quarter of 2027. RenewalTracker will not use customer data to train AI models. If your organization turns on the optional AI features, the information you supply may be processed by AI to provide them.

No. RenewalTracker is built to track licenses, permits, contracts and other renewals, not patient records. It isn't designed to store protected health information, and we don't sign Business Associate Agreements. Customers should not store PHI in RenewalTracker; doing so is at their own risk. Healthcare organizations use RenewalTracker to manage provider licenses, facility permits, vendor contracts and other renewals without any patient data.

HIPAA applies to systems that store patient health information. RenewalTracker isn't designed to store it, so it isn't a HIPAA system and doesn't sign Business Associate Agreements. Healthcare customers use it for the business side of compliance: licenses, accreditations, permits, insurance and contracts.