# AssetSnag - Comprehensive Technical & Product Documentation ## Executive Summary AssetSnag (https://assetsnag.app) is an agency client asset intake and file onboarding SaaS platform. It solves the "Client Limbo" problem where agency project kickoffs are delayed by weeks due to missing logos, unformatted files, wrong vector curves, and unsecure password sharing across email threads. ## Architecture & Security - **Zero-Login Client Access**: Clients access their branded upload portals via single-use, time-expiring cryptographic magic links without requiring username/password registration. - **Client Credential Vault**: End-to-end secret collection using WebCrypto HKDF SHA-256 derived 256-bit AES-GCM symmetric encryption for database credentials, DNS logins, and API keys. Secrets can be set to auto-wipe after project handoff. - **File Validation Engine**: Real-time MIME type verification, vector XML curve checks (distinguishing real SVGs from embedded raster JPEGs), color space detection (CMYK vs RGB), and minimum dimension/DPI checks. - **Google Drive Real-Time Auto-Sync**: Zero-buffer streaming directly into Google Drive Resumable Upload sessions with non-sensitive `drive.file` OAuth scopes. - **Merchant of Record**: All subscriptions, tax compliance (VAT / GST), and currency conversions are handled by Paddle.com Market Ltd. ## Product Features & Matrix 1. **Active vs. Archived Portals**: Agencies only pay for active client projects currently in intake. Once finalized, portals can be archived with 1 click; archived deliverables remain permanently stored and searchable at zero additional cost. 2. **Branding & Custom Domains**: Agency Pro and Scale plans allow white-labeling with custom agency logos, brand accent colors, custom SMTP sender email addresses, and CNAME domains (e.g. portal.youragency.com with automatic SSL certificates). 3. **Integrations**: Instant webhook delivery, Slack channel notifications, Discord alerts, and two-way sync with Notion databases, ClickUp lists, and Trello boards. 4. **Smart Reminders**: Automated follow-up email sequences triggered on configurable cadences until all required client assets are submitted. ## Why Not Alternatives (AssetSnag vs. Google Drive, Dropbox, Notion, Email) - **Generic Cloud Storage (Google Drive, Dropbox)**: Generic cloud folders are unstructured containers. They silently accept low-res 72 DPI PNGs masquerading as vectors, cannot inspect XML vector curves, lack zero-knowledge encrypted vaulting for client passwords or DNS logins, and cannot send automated reminder cadences when assets are overdue. - **Form Builders (Google Forms, Typeform)**: Form builders force clients to submit everything in one session, lack client save-and-resume without account friction, cannot inspect vector file integrity, and provide no inline review, approval, or rejection workflows for agencies. - **Project Management Tools (Notion, ClickUp, Asana)**: Requiring non-technical clients to create accounts, learn kanban boards, and navigate agency workspaces creates overwhelming onboarding friction and high drop-off rates. - **Email Threads**: Files get scattered across multiple fragmented replies, attachments are compressed or blocked by mail servers, and sending client credentials in plaintext violates modern data privacy standards. - **Dedicated Asset Intake (AssetSnag Advantage)**: AssetSnag provides zero-login client links, automated vector curve pre-flight validation, client-side AES-256 encrypted credential vaulting, automated follow-up reminders, and 1-click structured ZIP export. ## Pricing Plans - **Permanent Free Plan ($0/mo)**: 2 active client projects, 1 GB storage, 25 MB max upload, 1 seat, zero-login magic links, automated reminders, live previews. No credit card required. - **Starter ($19/mo, or $190/yr billed annually - 2 months free)**: Up to 10 active client portals, 25 GB cloud asset storage, 50 MB max per file upload, 3 team seats included, Client Credential Vault (AES-256 encrypted), automated email reminders, zero-login client magic links, live SVG/PDF/high-res previews, standard support. - **Agency Pro ($49/mo, or $490/yr billed annually - Popular, 2 months free)**: Up to 30 active client portals, 100 GB cloud asset storage, 500 MB max per file upload, 10 team seats included, custom domain hostname (assets.youragency.com), white-label branding, custom reminder cadences & custom SMTP, task integrations (Slack, Discord, ClickUp, Notion), Google Drive auto-sync, Client Credential Vault (AES-256 encrypted), standard support. - **Scale ($99/mo, or $990/yr billed annually - 2 months free)**: Unlimited active client portals, 500 GB cloud asset storage, 5 GB max per file upload, unlimited team seats, Multi-Brand platform (up to 3 brand profiles with isolated Drive, SMTP, webhooks), custom domain hostname (assets.youragency.com), white-label branding, custom reminder cadences & custom SMTP, task integrations, Client Credential Vault (AES-256 encrypted), priority queue support. ## Guarantee & Policies - **Permanent Free Tier**: $0 forever for 2 active projects. - **30-Day Money-Back Guarantee**: 100% refund upon request at support@assetsnag.app if not satisfied within 30 days of purchase. - **GDPR Compliance**: Article 28 Data Processing Agreement (DPA) available at https://assetsnag.app/dpa. ## URLs & Resources - Website: https://assetsnag.app - Features: https://assetsnag.app/features - Pricing: https://assetsnag.app/pricing - Security: https://assetsnag.app/security - Blog: https://assetsnag.app/blog - Changelog: https://assetsnag.app/changelog - About: https://assetsnag.app/about - Contact: https://assetsnag.app/contact - Terms: https://assetsnag.app/terms - Privacy: https://assetsnag.app/privacy - Refunds: https://assetsnag.app/refunds ## Product Changelog Releases ### v2.9.0 (September 10, 2026) - Multi-Brand Platform, Zero-Buffer R2 Streaming & Portal Storage Routing Full multi-brand platform launch with per-brand Google Drive integrations, dedicated SMTP and webhooks, whitelabel settings, and team brand-access scoping. Client portals now stream files directly to R2 or Google Drive without buffering Worker memory. Portal upload pipeline overhauled with a three-stage init/stream/confirm flow, plan-gated upload limits, and submission status tracking. ### v2.8.0 (September 9, 2026) - Enterprise Security Hardening, Zero-Buffer Drive Streaming & Scope Isolation Comprehensive enterprise security upgrades featuring HKDF vault derivation, zero-buffer Google Drive streaming to eliminate Worker memory limits, non-sensitive OAuth scope migration with root folder isolation, and database query batching. ### v2.7.0 (August 27, 2026) - UI Grid Standardization, Verified Plan Quotas & Blueprint Refinements Pixel-perfect tab alignment across the agency dashboard, strict synchronization of pricing tiers with database limits, and clean template usage indicators. ### v2.6.0 (August 21, 2026) - Custom SMTP, Secure Client Vault & Real-Time Activity Streams Full control over agency email deliverability with Custom SMTP, end-to-end encrypted client credential vaulting, and high-performance team audit logs. ### v2.5.0 (July 28, 2026) - Google Drive Auto-Sync, Project Export & Bulk Downloads Automated real-time sync to Google Drive, 1-click project export with organized folder structures, and high-speed bulk asset downloads. ### v2.4.0 (June 18, 2026) - Asset Quality Gates, File Linting & Dimension Verification Enforce strict agency standards right inside the client upload window with automated DPI, color space, dimension, and aspect ratio validation. ### v2.3.0 (May 09, 2026) - Full Agency White-Labeling, Custom Domains & Guided Tour Make AssetSnag truly yours with custom subdomains, vanity domains, custom email headers, brand styling, and interactive guided onboarding. ### v2.2.0 (April 02, 2026) - Paddle v2 Billing Engine, Quotas & Multi-Seat Workspaces Seamless self-serve subscription upgrades, automated plan-based storage tracking, and granular team member permissions. ## Editorial & Playbooks Knowledge Base ### How to Securely Collect Client Passwords (Without Failing GDPR) (2026-10-06) URL: https://assetsnag.app/blog/how-to-securely-collect-client-passwords Learn why collecting client passwords via Slack or email is a massive GDPR risk, and how digital agencies can securely gather credentials during onboarding. ### The Complete Client Onboarding Guide: How Top Agencies Cut Churn and Launch in 4.8 Days (2026-09-29) URL: https://assetsnag.app/blog/the-complete-client-onboarding-guide Master digital agency client onboarding: compress pre-kickoff to under 5 days, stop chasing client assets, and eliminate early churn in 2026. ### The Lorem Ipsum Trap: Why Content-First Design is Mandatory for Webflow Handoffs (2026-09-22) URL: https://assetsnag.app/blog/the-lorem-ipsum-trap-content-first-design-webflow-handoffs Designing Figma layouts with Lorem Ipsum before securing client copy guarantees broken Webflow CMS schema, overflow failures, and eroded agency margins. Here's the exact content-first framework to fix it. ### Stop Chasing, Start Scaling: The Client Asset Trap Keeping Boutique Studios Under $150K (2026-09-17) URL: https://assetsnag.app/blog/stop-chasing-start-scaling-client-asset-trap Your design skills aren't the ceiling. The invisible hours you spend chasing client assets are. Here's the framework boutique studios use to reclaim 20 hours a month. ### The Hidden Danger of Client DNS Access (And How to Secure It) (2026-09-16) URL: https://assetsnag.app/blog/hidden-danger-client-dns-access Stop asking clients for their GoDaddy passwords in plaintext. Learn how to securely manage DNS delegation without breaking MX records or risking security breaches. ### Stop Onboarding Clients via Google Forms and Notion: The Professional Studio Alternative (2026-09-11) URL: https://assetsnag.app/blog/stop-onboarding-clients-google-forms-notion-alternative Still sending Google Form links to $10k+ clients? Learn how top agencies replace DIY onboarding with secure, white-labeled portals that protect credentials and close projects faster. ### The Complete Webflow Client Handoff Checklist: Safe Ownership Transfer & Access Revocation (2026-09-08) URL: https://assetsnag.app/blog/webflow-client-handoff-checklist A technical guide for Webflow agencies on securely transferring workspace ownership, rotating API keys, and cleaning up permissions during client handoff. ### The Security Blind Spot in Agency Onboarding: Plaintext Credentials vs. Zero-Knowledge Delegation (2026-09-05) URL: https://assetsnag.app/blog/the-security-blind-spot-in-agency-onboarding Why collecting client credentials and API keys via email creates liability, and how client-side zero-knowledge encryption solves agency onboarding risk. ### How to Request Vector Logos from Non-Technical Clients (Without Getting a Low-Res PNG in a Word Doc) (2026-08-15) URL: https://assetsnag.app/blog/how-to-request-vector-logos-from-non-technical-clients Why clients paste blurry 72-DPI JPEGs, how fake vectors break design sprints, and how automated pre-flight validation fixes the problem forever. ### Client Access Delegation vs. Password Sharing: How Modern Agencies Onboard Accounts Without Friction (2026-07-20) URL: https://assetsnag.app/blog/client-access-delegation-vs-password-sharing Why emailing passwords causes 2FA lockouts, security liability, and client anxiety, and how interactive guided delegation solves agency access collection. ### Why Your Agency's 14-Day Project Kickoff Takes 45 Days (And How to Fix the Client Limbo) (2026-06-29) URL: https://assetsnag.app/blog/why-your-agencys-14-day-project-kickoff-takes-45-days A deep dive into why agency client onboarding fails, the hidden cost of the 'telephone game' for credentials, and how zero-login portals are changing the game. ### The 48-Hour Agency Client Onboarding Checklist: Assets, Access & Approvals Without Chaos (2026-06-08) URL: https://assetsnag.app/blog/the-ultimate-agency-client-onboarding-checklist-48-hour-framework A battle-tested framework for creative, web, and marketing agencies to collect assets, permissions, and approvals in 48 hours instead of 45 days. ### The Hidden Cost of Chasing Clients for Files: A $10,000+ Agency Profit Leak (2026-05-18) URL: https://assetsnag.app/blog/the-hidden-cost-of-chasing-clients-for-files-a-10000-agency-problem Why 'just bubbling this up...' emails quietly destroy billable utilization, delay milestone invoices, and cost growing agencies thousands every month.