The controls a firm holds over its data in Askhive, and where each one is.
What this is. Every control a firm holds over its own data in Askhive, with where it lives in the product, so a firm can find each one rather than take this page's word. Last verified 28 September 2026.
| Control | Where | What it does |
|---|---|---|
| Service fit for new clients | Admin → Service fit | Criteria the firm sets (services, states, work it does not take, the smallest engagement, the notice it needs). Askhive proposes whether a new request fits, with reasons about the service, the state, the deadline, the size or missing information — never a protected characteristic or a stand-in for one; a professional decides and nothing is declined automatically; the client never sees it. Off by default for property and lending practices until the firm's attorney confirms. |
| Who can approve | Admin → Users | Roles per seat; an assistant drafts and never approves; a reviewer approves and never touches billing or identity. |
| Two-step sign-in for everyone | Admin → Users → Require two-step sign-in | Once on, a seat without a second factor is refused everything until it sets one up. |
| Support access | Settings → Askhive support access | Closed by default. A seven-day window you open and can close; every look is recorded for you. |
| Client records | Clients | Add, edit, export and delete each client; a deleted client's records go with it. |
| What leaves for the engine | Every draft | Identifiers are replaced by tokens before the brief leaves; the draft shows which kinds were redacted. |
| Delivered links | Work → a delivered report | A passcode on every Practice link by default, and a client page per client that you can close or rotate. |
| Your data, all of it | Settings → Export | An export of the firm's clients and reports, sent to the owner's address. |
| The agreement | Settings → Data processing agreement | The DPA, accepted in the product with a name and a date, and thirty days' notice before a sub-processor changes. |
What is not a control here: Askhive cannot see inside a firm's reports without the firm opening the support window above, and there is no setting that lets it. The firm is the controller of its clients' data and Askhive its processor — the Data Processing Agreement says so in the words that bind.
See also the security fit sheet.