Insurance

AI for insurance agencies that keeps policyholder data out of public tools

SUPERWISE® Sentinel runs on your agency's Windows PCs and replaces the identifiers it recognizes before a prompt reaches ChatGPT or Claude. Client files can go to SUPERWISE Chat, a workspace on a model SUPERWISE hosts.

What the rules expect of an agency

The NAIC bulletin reaches agencies through carriers

The December 2023 NAIC Model Bulletin addresses insurers and expects written AI governance, risk controls, and oversight of third-party systems and data. By August 31, 2026, 25 states and DC had adopted it. Agencies should expect carrier questions and ask what each carrier requires.

Read the NAIC Model Bulletin on AI and the adoption map.

Privacy and data security already cover producers

State insurance authorities enforce GLBA privacy. NAIC Model Law 668 applies to licensees, including producers; as of August 2025, 28 jurisdictions had adopted it. Small-licensee exemptions from a written program do not remove event-investigation and reporting duties. State versions differ.

Read the GLBA authority and Model Law 668.

What Sentinel catches in the formats your staff type

What staff pasteWhat Sentinel does
Social Security numberReplaced
Email address, phone numberReplaced
Credit card numberReplaced
Bank account numberReplaced when a label sits next to it, such as "Account number:"
VINReplaced when labeled
Date of birthReplaced when labeled

The admin chooses whether Sentinel redacts or blocks, and sets the replacement text.

For each request Sentinel records metadata only: counts, which rule fired, and latency. Prompts go straight to the AI provider; SUPERWISE receives only check metadata.

Try your own formats in the demo with made-up values before relying on one.

For client names, policy numbers, and carriers, use [INSURED], [POLICY_NO], and [CARRIER], work from the specimen form, and restore real details after the answer.

Rollout for a small IT team

Protect each Windows PC

  • The Windows app runs on Windows 10 and 11. Each protected PC is one Sentinel.
  • The all-users installer is planned for the week of November 16. Admin control of users' Pause is planned for it, with no date yet.
  • The Windows app needs no Docker. Docker Desktop is needed only to run a gateway on the machine itself with the CLI.

What it costs for an agency

Sentinel Business: $50/month

Up to 5 Sentinels for production and business workflows. Each protected PC is one Sentinel.

A 50-person agency on its own PCs: 10 Business plans, $500 a month. 30 days free, no credit card for Sentinel.

For a team gateway in your own cloud, talk to us about Enterprise.

When a carrier asks

Security review facts and documents

  • SOC 2 audit underway (report expected Q1 2027)
  • ISO 27001 underway
  • Annual third-party penetration test (summary on request)
  • A standard DPA exists, available on request.
  • Prompts go straight to the AI provider; SUPERWISE receives only check metadata.

Subprocessors

  • Google Cloud: Control plane; Sentinel metadata, us-central1
  • Stripe: Billing, United States
  • HubSpot: Contact data, United States
  • 365 Data Centers: Hosts SUPERWISE's equipment for the hosted model in a secure cage, Nashville, Tennessee

Questions insurance agencies ask