Security at InsurGrid

The safer way to share your insurance information

InsurGrid makes it easy to securely connect your insurance accounts. Once connected, InsurGrid works to verify ownership of your account and transfer the data you’ve permissioned from your insurance carrier in a way that’s safe and secure. 

The intent of this statement is to assist customers and partners with an active business relationship with InsurGrid, Inc. to document InsurGrid’s compliance with cybersecurity regulations. 

InsurGrid takes great strides to safeguard our user's data within our comprehensively hardened infrastructure.

Physical security

We use Amazon Web Services for our website infrastructure, where our data is physically stored within their world class data centers that use state-of-the-art multilayer access, alerting, and auditing measures.

Data Security

We follow industry best practices to safeguard our users’ data. 

Data in Transit

InsurGrid encrypts data in transit. Data controlled by InsurGrid is encrypted in transit using Secure Socket Layer / Transport Layer Security (SSL/TLS). Data that contains sensitive data has an additional layer of AES 256-bit encryption.

Data at Rest

InsurGrid encrypts data at rest using AES-256 encryption algorithm.

Access Controls

InsurGrid deploys controls to limit access to relevant information systems and Nonpublic Information.

Customer Payment Information

We use Stripe for payment processing and do not store any credit card information. Stripe is a trusted, Level 1 PCI Service Provider.

Incident Reporting

Incident Response

InsurGrid implements a protocol for handling security events which includes escalation procedures, rapid mitigation, and post mortem. All employees are informed of our policies.

Responsible Disclosure

InsurGrid has a Responsible Vulnerability Disclosure program. You can read more details about our program, the rules of engagement, and how to submit vulnerability reports at https://insurgrid.com/disclosure.

If you have a security concern, question, or are aware of an incident, please send an email to security@insurgrid.com, a carefully controlled and monitored email account.

Last Updated: January 13, 2026