← Back to Home
Trust & Governance
Trust, Data Handling & Security
Protecting agency and insured data with clear operational boundaries, human-in-the-loop safeguards, and an ongoing compliance roadmap.
Security & Operational Principles
Operating inside an agency's core Applied Epic or AMS360 environment requires clear discipline. We treat data privacy and regulatory boundaries as foundational requirements.
1. Data Handling Intentions (TODO: confirm with security policy)
- Minimal Data Retention: We design for minimal retention of sensitive document payloads after processing and successful Applied Epic synchronization. (TODO: confirm with security policy)
- Model Training Boundaries: We intend that agency client records, loss histories, and commercial schedules are never used to train public or commercial foundation models. (TODO: confirm with security policy)
- Encryption Standards: Transit data encrypted via modern TLS protocols, and data at rest protected using standard AES encryption. (TODO: confirm with security policy)
2. Strict Human Approval Safeguards
- Licensed Agency Control: Quantana US is an operational technology services company. Quantana US does not place, bind, or advise on insurance. We work alongside your licensed team.
- Producer Review Gates: Quotes, submission packages, and policy difference reports are delivered for explicit review and sign-off by your licensed account executives and producers.
- Auditability: Extraction and discrepancy audit histories are tracked with user attribution and timestamp metadata.
3. Security Certification Roadmap (In Progress)
- Current Status: Independent security reviews and third-party compliance frameworks are actively in progress. We do not claim SOC 2 or vendor partnerships until formally certified.
- Access Control: Administrative access controls, multi-factor authentication, and segmented operational access are being formalized. (TODO: confirm with security policy)
4. Staff Confidentiality & Oversight
- All operational specialists undergo identity verification, background screening, and annual confidentiality agreements.
- Supervised operational environments with controlled access during active processing workflows.