Protect policyholder data and prove it to the regulator
Insurers process medical, financial and identity data for every policy and claim. We help insurers enforce data handling policies, extend existing classification into real-time protection and run governance that stands up to IRA scrutiny.
The risks we see most in insurance
Sensitive claims data
Medical and financial records moving between staff, brokers, assessors and partners.
Classification that isn't enforced
Documents are labelled, but nothing stops a confidential file from being sent out.
Broker and partner access
External parties connecting to portals and systems with weak identity controls.
Governance overhead
Risk registers and compliance tracking kept in spreadsheets.
Where to start
Each area opens our assistant, which matches your situation to the right approach in about two minutes.
Regulations that apply
- IRA Guidance Note on Cybersecurity for the Insurance IndustryBoard-level responsibility, a formal cyber risk programme and 24-hour reporting of material incidents for Kenyan insurers.
- Kenya Data Protection Act, 2019Security safeguards, 72-hour breach notification, impact assessments, registration and cross-border rules for anyone processing personal data in Kenya.
DLP built on existing labels
Had an existing classification model and needed DLP that could enforce policy against those labels.
Deployed DLP engineered to integrate with the insurer's existing taxonomy.