Trust and Data Privacy

Private by Design.

Insurance is regulated work, and the advisors that support it are built that way. Your data stays yours, answers stay grounded in sources you can trust, and the advisors fit inside the systems and controls you already run.

Aligned With the Standards You Answer To.

Our practices are designed to the frameworks regulated insurers, brokers and their auditors already use.

  • SOC 2

    Controls for the security, availability and confidentiality of the systems that handle your data.

  • GDPR

    Personal data handled lawfully, kept to what is needed, and open to the people it describes.

  • ISO/IEC 27001

    Information security managed as a system, with risks assessed and controls kept current.

  • ISO/IEC 42001

    The AI management standard: responsible design, use and oversight of AI systems.

  • NIST

    NIST cybersecurity and AI risk management guidance, applied to how advisors are built and run.

Aligned means our controls and practices are built to these frameworks. Ask us about current attestation and certification status for your review.

How Your Data Is Handled.

  • Private Cloud Ready

    Advisors run hosted by Avanew or inside a virtual private cloud installation, so your data stays within a boundary you control and your security team can see.

  • Grounded Answers

    Every advisor answers from well-known, trusted industry knowledge bases together with the internal material you provide, such as forms, guidelines and appetite. Grounding answers in vetted sources is how we keep the likelihood of hallucination to a minimum.

  • Encrypted, Remembered Conversations

    Conversations are encrypted. When a user signs in, the advisor remembers earlier sessions, so the conversation picks up where it left off instead of starting over.

  • Connects Downstream

    Advisors connect to your internal systems downstream through connectors, APIs and MCP (Model Context Protocol) servers, so answers and actions fit the tools your teams already use.

Bring Your Security Questions.

Tell us what your security, compliance and procurement teams need to see. We will walk them through it.