iPurveyAssure is built for regulated insurers and ecosystem partners. Security and governance are embedded in how we design APIs, orchestration workflows and operational reporting.
Platform security
- Encryption in transit (TLS) for data exchanged via APIs and web interfaces
- Role-based access controls and least-privilege principles for internal systems
- Segregation between environments (development, staging, production)
- Monitoring, logging and alerting designed to support incident response
Data protection
We apply technical and organisational measures to protect information processed through our infrastructure, including access controls, secure development practices and vendor due diligence. Personal data handling is described in our Privacy Policy.
Governance & auditability
Embedded programs operate within insurer-led governance models. The platform supports:
- Configurable eligibility and rules controlled by insurers
- Event history and audit-ready records across activation and payout workflows
- Operational reporting designed for regulatory engagement and complaints review
- Controlled distribution channels with consent and status tracking
Compliance alignment
We work with partners to align infrastructure design with applicable insurance, data protection and operational requirements. Specific obligations depend on program structure, jurisdiction and insurer policies. Learn more on our Compliance section.
Certifications & standards
iPurvey maintains industry certifications and security practices aligned with our group standards, including Cyber Essentials and ISO 27001-aligned controls where applicable to our operating environment.
Responsible disclosure
If you believe you have discovered a security vulnerability, please report it to info@ipurvey.com with sufficient detail to reproduce the issue. We ask that you do not publicly disclose vulnerabilities until we have had a reasonable opportunity to investigate.
Contact
For security or compliance enquiries related to iPurveyAssure, contact info@ipurvey.com or visit our contact page.