Applied Systems

The removal test leaves a very large business intact. Strip the models out and agencies still have their system of record, their accounting and commission structures, their client and policy files, their quoting through the commercial rating product, their self service portals, and above all the connectivity exchange moving policy data between insurers and agencies on industry data standards.

That exchange is infrastructure with no learned component at its core, and it is the asset competitors find hardest to replicate. Marketing describes the flagship as an artificial intelligence powered management system that moves beyond a traditional system of record, and the capabilities behind that phrase are assistive: email filing and summarisation, natural language question answering, document pre fill, opportunity identification and commission matching. Each makes existing work faster. None of them is what the customer bought the platform to do.

The oversight position is evidenced by product design rather than asserted in principle, which is what places it above the lane norm. The document extraction capability ships with a human in the loop review step built in, described as part of the feature rather than as a configuration option, so a person confirms extracted values before they populate the management system.

The wider capability set is scoped assistively throughout: summaries of email threads, natural language question answering, information recaps, opportunity identification, coverage gap highlighting and commission matching are all outputs a person acts on rather than actions the system completes. Two passes located no claim of autonomous execution anywhere in the estate, which for a vendor of this size in 2026 is a deliberate position.

What keeps it below the top band is that the review step is documented for one capability, and no equivalent statement covers the others or establishes what a user is shown before accepting a generated output.

The audit scope makes this gap unusually visible. Independent examinations cover security, availability and confidentiality, and processing integrity is not among the criteria assessed, which is precisely the criterion addressing whether system processing is complete, valid, accurate and timely. That is the question a buyer would ask about document extraction populating policy fields and about automated matching of carrier commission statements against expected amounts.

Two passes located no accuracy or error rate for either, no validation methodology, no benchmark, no drift monitoring and no model documentation. The reconciliation product is the sharpest instance, because matching financial transactions is arithmetic with a right answer, and a published match rate with an exception rate beside it would be straightforward to produce and does not appear anywhere.

This is the best evidenced record among the distribution and specialist vendors in this lane, on three separate measures. Penetration is stated against external rankings a reader can check rather than against the vendor's own list, with 7 of the top 10 agencies on one industry ranking using the flagship system and 68 percent of another top 100 list relying on the company, alongside more than 11,000 agencies and brokerages representing more than 135,000 individual users.

Artificial intelligence adoption is reported with a number and a cohort, with the reconciliation product reaching more than 140 agencies of all sizes since its pre launch period. And an outcome is quantified for that product, at more than eight hours of reconciliation time saved per week for early adopters. Independent recognition during 2026 includes a software product award and technology provider ratings. The reservation is that the hours figure is an estimate of averages with no measurement method published, so it indicates direction and magnitude rather than establishing them.

Two passes located no statement on whether agency, insured or carrier data is used to train or improve any model, no artificial intelligence data handling policy, and no description of what leaves the platform during inference. The exposure is broad because of where the capabilities sit: an Outlook add in reads and summarises email threads containing client correspondence, a document reader extracts from carrier paperwork, an opportunity tool assembles a view across an agency's whole book, and a reconciliation product processes carrier commission statements.

That combination touches client communications, policy detail and agency financial records. A structural question follows from the exchange business and nothing published addresses it: the company sits between insurers and agencies moving policy data across the industry, and whether any of that flow informs model development is exactly the sort of question a large brokerage should ask before enabling these features.

The audit scope is published with unusual precision and the precision reveals what is missing. Independent examinations cover the trust services criteria of security, availability and confidentiality, which leaves the privacy criterion outside the scope of the assessment, and privacy is the one that addresses collection, use, retention and disclosure of personal information.

Confidentiality protects designated information from unauthorised access, which is adjacent to privacy and is not the same commitment. Two passes located no data processing agreement, retention schedule or subprocessor list to fill that gap.

The data at issue belongs largely to people who are not the customer, since agencies hold personal and commercial information about insureds, and an artificial intelligence layer that reads emails, files attachments, extracts from carrier documents and builds book of business views is operating across all of it.

This is the most complete security disclosure encountered in this lane, and four specifics carry it. Independent examinations are of the second type, meaning operating effectiveness over a period rather than design at a point in time. They are conducted semi annually rather than annually, which is twice the ordinary cadence and means a buyer is rarely reading a report that has aged.

The criteria assessed are named openly as security, availability and confidentiality, so a reader knows exactly what was and was not examined rather than inferring it. And the scope is enumerated product by product, with the constituent systems of the cloud environment listed individually and separate reports maintained for two acquired products, which is the detail that turns a certificate into evidence.

Two routes to obtain the reports are published, including a self serve due diligence documentation area on the customer community site rather than a request queue. A buyer should still confirm the current period dates and note that privacy and processing integrity sit outside scope.

The company holds no insurance licence and does not claim one, and its customers are the licensed parties, since agencies and brokerages carry producer licensing in every state and jurisdiction they operate in. Two regulated surfaces are touched by the software without being addressed in anything published.

Agency accounting includes premium held on behalf of insurers and insureds, which in most jurisdictions carries fiduciary or trust account obligations examined by regulators, and the platform runs that accounting including commission structures and reconciliation. Producer licensing and appointment status govern who may transact which business, and nothing published describes whether the system enforces or tracks it. The company does publish a Canadian premium rate index as industry research, which is market intelligence rather than a regulatory function.

Two passes located no responsible artificial intelligence statement, governance framework, fairness testing, model card or bias evaluation. The exposure here is different in kind from the carrier side vendors in this lane and worth naming precisely, because an agency system does not price risk or decline applicants. What it does is shape advice.

The coverage gap capability tells a producer which protections a commercial client appears to be missing, drawn from business attributes, industry classification codes and existing coverage, and the book of business tool directs attention toward some accounts and away from others. Both influence which clients receive proactive service and what they are advised to buy, which is a professional judgement the agency is answerable for under its own errors and omissions cover. Nothing published describes how either output is tested or what happens when the model consistently overlooks a category of client.

Recourse is unaddressed in both directions and the liability question has an unusual shape here because the customer is a professional intermediary carrying its own duty of care. An agency advises a commercial client on coverage, and if a gap analysis drawn from industry classification codes and existing coverage misses a protection the client needed, the claim lands on the agency's errors and omissions cover rather than on this vendor, with nothing published allocating anything between them.

Document extraction populating policy fields creates the same structure, mitigated for that one capability by a built in review step that puts a named person on the confirmation. The insured is further removed still: they never see this software, are not told a model shaped the advice they received or the attention their account attracted, and have no route to either party. Two passes located no liability language, error handling policy or artificial intelligence specific service commitment.

One dependency is named openly in the product announcement itself, with the document extraction capability stated to be built on Cytora technology, and naming a third party model supplier inside a feature description rather than burying it is uncommon in this lane and genuinely useful, since it tells a buyer that a separate vendor's model reads their carrier documents and that vendor can be diligenced on its own terms. The rest of the estate is unattributed.

Two passes located no provider, model family, version or hosting arrangement for the natural language question answering and research capability, the email thread summarisation, the book of business intelligence or the reconciliation matching, and no notification commitment when any underlying model changes.

Naming the supplier for one capability while leaving the others unattributed is the specific asymmetry to raise, because it establishes that the company is willing to disclose and has chosen not to elsewhere.

This vendor does not integrate with the distribution rails, it owns them. The connectivity exchange moves policy data between insurers, managing general agents, agencies and insureds on the industry's own data standards, supporting both batch download and real time services across personal, commercial, workers compensation and specialty and program lines, and carriers treat it as the route to the independent agency channel rather than as one option among several.

Around that sit the management systems, the rating product, the digital application and renewal platform, self service portals, mobile access and analytics, all natively connected so that a client interaction in one surface reflects in the system of record.

Third party integration is evidenced by named examples rather than by a partner count, including benefits plan modelling connected natively into the management system and a partnership with a carrier core vendor exposing the exchange inside its platform. The artificial intelligence follows the same pattern, reaching users inside their existing inbox and management system.

A defined cloud environment is named and its constituent products are enumerated, which is more structure than most vendors publish, and it appears in the context of audit scope rather than as deployment documentation. Two passes located no region list, no processing location statement, no tenancy description, no residency commitment a buyer could contract for and no private deployment path.

The gap matters because operations span four countries across two continents, including the United Kingdom and the Republic of Ireland, so European data protection obligations apply to part of the customer base and nothing published establishes where that data is processed or stored.

Products acquired over time sit on separate audit reports, which indicates separate infrastructure lineages, and nothing published describes whether they run in the same environment or how data moves between them.

Pricing is absent from every vendor surface across an estate spanning at least ten named products, and the buyer base makes that absence more consequential than usual, because a three producer independent agency and a global brokerage both appear on the customer list and neither can establish where it would land.

One third party estimate circulates in independent consulting content, putting the flagship system in the region of a few hundred dollars per user per month for a small agency with a four to five figure implementation and a 60 to 90 day onboarding, and it is an outsider's approximation rather than disclosure, offered here as the only public reference point rather than as a figure to rely on.

Nothing published indicates the unit of billing, contract term, or whether the artificial intelligence capabilities announced since October 2025 are included with the management system or licensed separately.

Coverage of the distribution side of insurance is close to comprehensive, which is what the top band is for. Agency size is addressed deliberately rather than incidentally, with distinct products for small independents, mid market agencies, and brokerages carrying complex structures, specialty lines or non traditional niche markets, so the company holds the customer as it grows rather than losing it at a threshold.

Line coverage spans property and casualty and employee benefits, with the exchange carrying personal, commercial, workers compensation and specialty and program business. Party coverage extends past agencies to insurers and managing general agents on the other side of the exchange, and to insureds through self service portals. Geography covers the United States, Canada, the Republic of Ireland and the United Kingdom. The one honest limit is that this is the sell side only, with no carrier core, underwriting or claims capability anywhere in the estate.