Overview

Protecting customer and consumer data is a core responsibility of Blue I LLC dba: Insurance Agent App. Our platform is designed and operated using industry-standard security controls, secure cloud infrastructure, and a rigorous operational framework intended to protect the confidentiality, integrity, and availability of data entrusted to us.

As part of our business operations, Insurance Agent App receives and processes insurance-related information through secure integrations with insurance carriers and agency management systems. Prior to establishing these partnerships, our company successfully completed security and technical due diligence reviews conducted by multiple industry organizations. These reviews have resulted in approved partner relationships with the agency management systems and insurance industry partners with whom we integrate.

Security Governance & Operational Model

The Insurance Agent App software platform is developed, deployed, and maintained by a U.S.-based software development and operations partner that serves as a subservice organization. This organization maintains a current SOC 2 Type II certification and is responsible for implementing and managing security controls across the application and cloud infrastructure environments supporting our platform.

The subservice organization is responsible for:

• Secure software development lifecycle (SDLC)
• Infrastructure architecture and cloud operations
• Application deployment and change management
• Vulnerability management
• Security monitoring and alerting
• Penetration testing and remediation
• Incident response support
• Business continuity and operational resilience

The subservice organization’s SOC 2 Type II report is available for review under an executed Non-Disclosure Agreement (NDA).

Cloud Infrastructure Security

The Insurance Agent App SaaS platform operates within a globally recognized enterprise cloud environment with extensive security controls and compliance certifications.

Infrastructure security controls include:

• Multi-factor authentication (MFA) for all cloud administrative accounts
• Role-based access controls (RBAC
• Principle of least privilege access management
• Restricted production environment access
• Centralized logging and monitoring
• Controlled configuration and deployment processes

Production environment access is limited to a small number of authorized personnel whose responsibilities require such access.

Data Protection

Insurance Agent App employs multiple layers of technical and administrative safeguards to protect customer information and sensitive insurance policy data.

These safeguards include:

• Encryption of data in transit and at rest
• Secure storage within protected cloud environments
• Controlled access to customer informationRegular backup and recovery procedures
• Continuous monitoring of systems and security events

Secure Integrations & API Security

The Insurance Agent App platform exchanges information with insurance carriers, agency management systems, and other approved technology partners through secure APIs and approved integration methods.

Security controls supporting these integrations include:

• OAuth-based authentication and authorization where applicable
• Encrypted API communications
• Access token validation and management
• Controlled partner access permissions
• Secure transmission of data between systems

These controls help ensure that data is exchanged only through authorized and encrypted communication channels.

Vulnerability Management & Incident Response

Security is maintained through a proactive and ongoing risk management process.

Our security program includes:

• Regular vulnerability scanning
• Independent penetration testing activities
• Timely remediation of identified risks
• Security monitoring and alerting
• Documented incident response procedures
• Defined escalation and communication processes

In the event of a security incident, established response procedures are followed to investigate, contain, remediate, and communicate the issue as appropriate.

Business Continuity & Disaster Recovery

Our organization maintains documented incident response, business continuity, and disaster recovery procedures designed to support the ongoing availability and recovery of critical services.

These procedures are intended to minimize operational disruption and facilitate timely restoration of services in the event of an unexpected incident.

Commitment to Security

Security is an ongoing operational discipline rather than a one-time certification exercise. Our security posture is continuously reinforced through partner assessments, cloud security best practices, operational controls, and the expertise of our SOC 2 Type II-certified technology partner.

The successful completion of multiple security reviews conducted by insurance carriers, agency management systems, and technology partners reflects our commitment to maintaining a secure, reliable, and trusted platform for the protection of customer and consumer information.

Additional security information may be provided upon request and, where appropriate, subject to confidentiality obligations.

‍