The i4a platform at a glance
| Area | How i4a works |
|---|---|
| Architecture | One member database shared by every module; no sync between separate tools |
| Your database | Each client's data is kept in its own separate database; no client shares a database with another |
| Hosting | Servers in the United States, in a Tier III colocation facility |
| Encryption | All traffic encrypted in transit with TLS (256-bit SSL) |
| Backups | Membership, registration, financial and page data every four hours; uploaded files daily; stored separately from production |
| Availability | 99.9% uptime commitment |
| Payments | i4a doesn't store card numbers; card data is handled by 8am AffiniPay, a PCI DSS Level 1 certified processor |
| Staff access | Individual staff accounts with full or restricted access; every staff login recorded |
| Member passwords | Stored with bcrypt hashing; never stored or sent in plain text |
| Single sign-on | OAuth 2.0 and OpenID Connect |
| API | REST API with per-session keys that expire after four hours; enabled by an i4a administrator |
| WordPress | i4a WordPress plugin for single sign-on with your WordPress site |
| Integrations | More than 25 integration partners |
| Your data | Export any time; on leaving, a complete export and deletion on request |
| Compliance documents | i4a doesn't currently hold a SOC 2 report; i4a completes security questionnaires on request |
| Implementation | Typically 60 to 90 days |
One database behind every module
When a member renews, registers for an event or updates a profile, every part of i4a sees the change at once, because there's only one record. i4a doesn't sync data between separate products.
| Module | What it reads and writes on the member record | Details |
|---|---|---|
| Membership and dues | Membership type, status, renewal date, dues rates | Membership features |
| Events | Registrations, member pricing, attendance | Event management |
| Member portal | Profile, renewals, registrations, history | Portal features |
| Directory | Public or members-only listings from member data | Directory features |
| Segments from any member field | Email marketing | |
| Payments and accounting | Every transaction, coded to your GL accounts | Payment features |
| Abstracts and submissions (add-on) | Submissions linked to the member | Submissions Manager |
| i4AI Studio (add-on) | AI assistants for writing, images and data, inside i4a | i4AI Studio |
How i4a connects to your other systems
- Single sign-on: i4a supports OAuth 2.0 and OpenID Connect, so members sign in once and move between your website, learning management system, community platform and other connected services.
- REST API: i4a provides REST API access for third-party tools and custom applications. API sessions use authentication keys that expire after four hours, and API access is enabled by an i4a administrator.
- WordPress: the i4a WordPress plugin lets members sign in through your WordPress site while their data stays in i4a.
- Accounting: i4a exports transactions in a format compatible with Transaction Pro Importer for QuickBooks, and posts each day's transactions to NetSuite as balanced journal entries through a one-way sync i4a maintains.
- Partners: i4a has more than 25 integration partners, including 8am AffiniPay, NetSuite, Higher Logic, Cadmium, Swoogo and TalentLMS.
Security, hosting and reliability
Hosting and infrastructure
- i4a is hosted on servers in the United States, in a Tier III colocation facility with 24/7 guarded access, badge and biometric entry, mantrap entry controls and locked server racks.
- Each client's data is kept in its own separate database.
- Database servers have no public IP addresses and are reachable only from i4a's own web servers.
- Traffic from high-risk countries is blocked at the network edge.
Backups and availability
- Membership, registration, financial and page content data are backed up every four hours; uploaded files such as PDFs are backed up daily.
- Backups are kept on separate storage from the production servers.
- Servers run on solid-state storage behind redundant firewalls, with dual internet connections, battery backup, generator power and remote monitoring.
- Because every server is virtualized, a lost physical machine can be restored to new hardware within hours.
- i4a maintains a 99.9% uptime commitment.
Access and passwords
- Staff sign in with individual accounts; administrators set each staff user to full or restricted access.
- Every staff login is recorded, and the login history is available from i4a on request.
- Member passwords are stored with bcrypt hashing.
Payments
- i4a doesn't store credit card numbers. Card data is handled by 8am AffiniPay, a PCI DSS Level 1 certified payment processor, and never touches i4a servers.
Your data
- You can export your association's data at any time. If you leave i4a, i4a provides a complete export and deletes your data on request.
- i4a shares data only with the service providers needed to run the platform, such as the payment processor, and only for that purpose.
- i4a doesn't currently hold a SOC 2 report. i4a completes security questionnaires and discusses its practices with your IT or compliance staff on request.
Full details are on i4a's security page.
How implementation works
| Step | What happens | Who does it |
|---|---|---|
| 1. Discovery | Setup advice based on your workflows and membership structure | i4a with your team |
| 2. Data import | Members and contacts, membership levels and renewal dates imported from a spreadsheet export with i4a's contact import wizard | Your team, guided by i4a |
| 3. Configuration | Membership types, emails and branding set up in the admin tools | Your team, with i4a |
| 4. Training and launch | Staff training and support through go-live | i4a |
- A typical implementation takes 60 to 90 days.
- The one-time $1,500 setup fee includes 15 hours of onboarding and support for your data import.
- i4a doesn't bring over financial history, such as past transactions or dues payments. Simple history, such as committee service or past event registrations, can be brought across for a fee outside the setup fee, estimated up front after i4a sees your export.
How support works
| i4a | |
|---|---|
| Team | U.S.-based, average tenure 19 years; one team for every module |
| Rating | 4.85 out of 5 from clients, across more than 1,000 surveys since 2012 |
| Included | Basic Support by ticket, up to 2 hours a month, on every plan |
| Phone and Zoom | Premium Support, $150 a month |
Where the i4a platform is used
Professional associations Trade associations Medical associations Education organizations Nonprofits Association management companies, which run several client associations, each in its own database.
Technical questions about the i4a platform
Where is i4a data stored?
On servers in the United States, in a Tier III colocation facility. Each client's data is in its own separate database.
Is i4a data encrypted?
Yes, in transit, using TLS (256-bit SSL). For encryption at rest, ask i4a about your specific hosting configuration.
How often is i4a data backed up?
Membership, registration, financial and page content data every four hours; uploaded files daily. Backups are stored separately from the production servers.
Does i4a support single sign-on?
Yes. i4a supports OAuth 2.0 and OpenID Connect, and the i4a WordPress plugin provides single sign-on with WordPress sites.
Does i4a have an API?
Yes. i4a provides a REST API with per-session keys that expire after four hours; API access is enabled by an i4a administrator.
Does i4a store credit card numbers?
No. Card data is handled by 8am AffiniPay, a PCI DSS Level 1 certified payment processor, and never touches i4a servers.
Does i4a have a SOC 2 report?
Not currently. i4a completes security questionnaires and discusses its practices with your IT or compliance staff on request.
Can we get our data out?
Yes, at any time. If you leave i4a, i4a provides a complete export and deletes your data on request.
Can i4a import our transaction history?
No. Members, contacts, membership levels and renewal dates are imported. Financial history isn't brought over; simple history, such as committee service or past event registrations, can be, for a fee estimated up front.
See how it works with your data
Bring your current systems list and your IT questions to a demo.
