Insurance Flow
You are holding people’s medical answers.
A life or disability application asks about someone’s health. A bond application asks for a social security number. That is not ordinary business data, and it is not stored here as though it were.
What is actually in place
Plain descriptions of things that exist in the running software, not a list of intentions.
Sensitive answers are encrypted one at a time
A question can be marked as protected when you build the form. Those answers are encrypted individually before they are stored, each with its own randomiser, so protecting them does not depend on the disk underneath being safe.
Two-factor for anyone with real power
Administrators must use an authenticator app — it cannot be skipped or postponed. Losing the phone does not lose the account: there are one-time recovery codes, each usable once and then dead.
A record of who did what
Logins and failed logins, two-factor changes, staff added, removed or given new permissions, applications created and deleted, secure links generated. Written down as it happens, so a question about last March has an answer.
One agency genuinely cannot see another
Separation is enforced underneath every request rather than by hiding buttons. A screen that forgot to check would still come back empty.
Your session is not sitting in the browser
Sign-in is held in a cookie the page’s own scripts cannot read, which shuts down the most common way accounts get taken over. Signing out ends it everywhere, not just on that tab.
Staff log in. Clients never do.
Your clients have no account and no password to lose, because they never needed one — they answer on a link and that is the whole of it. Fewer accounts is fewer ways in.
A disability application asks health questions. That is somebody’s medical history sitting on a screen.
It is encrypted answer by answer, every look at it is written down, and the session ends by itself when the producer walks away from the desk.
What we do not claim
Anyone selling you insurance software will say the word compliant. It is worth knowing what it does and does not mean.
- There is no HIPAA certificate
- Not for us and not for anybody else — no such certificate exists. What exists is the handling, and that is what is described above.
- We have not been independently audited
- No outside security audit and no SOC 2. If that is a requirement where you are, say so early and we will talk about what it would take.
- Demo agencies are walled off separately
- A trial tenant cannot email anyone at all, cannot reach the outside world, and stops answering when its week is up. How the demo is fenced →
If your compliance officer has questions, send them to us
We would rather answer them properly than have you guess from a marketing page.