Information Security Standards

1. Approach

Insuriant AI maintains administrative, technical, and organizational measures designed to protect information processed in the Services. Controls are selected according to risk, the nature of the Services, and the sensitivity of the information.

2. Technical measures

• Cloud infrastructure with separation of environments appropriate to each stage of operation
• Encryption in transit, and encryption at rest where the platform supports it
• Access control, least-privilege principles, and multi-factor authentication for privileged access where supported
• Logging, monitoring, and security telemetry
• Secure development practices and attention to known issues in material dependencies
• Protection of credentials outside of source code

3. Automated systems

• Limit automated tools to the information needed for the task
• Prefer configurations appropriate to business information where available
• Administer network compensation for unlicensed members separately from insurance purchase outcomes

4. Organizational measures

• Assigned responsibility for security within leadership
• Confidentiality expectations for personnel and contractors
• Vendor arrangements appropriate to each vendor’s role
• An incident response process, described in our Incident Response Policy

5. Shared responsibility

Customers and members are responsible for managing their own user access and endpoints, configuring integrations lawfully, and obtaining required consents for information they submit.

6. Contact

support@insuriant.ai

Insuriant AI, Wellington, FL 33414, United States