Security & compliance

Your rules. Your proof.

Security & compliance

How Indicary handles driver data.

Indicary acts as a processor for insurers and their authorized representatives under their permitted underwriting use. We receive records you upload or send; we don't request records from motor vehicle agencies. Records are used only to produce your recommendations, with no model training on your data. Every access to driver data is logged internally, and our incident-notification commitment can be provided on request. Recommendations are advisory: Indicary never declines, binds, or cancels. A Compliance & Security Packet is available on request.

You set the permitted use

Indicary acts as a processor for insurers and their authorized representatives. We process driver records only under your permitted underwriting use, and only to produce your eligibility recommendations.

Upload-only

We work with the records you upload or send through the portal or API. We don't request records from motor vehicle agencies, and we don't sell driver data.

No model training on your data

Your records are used to produce your recommendations and for nothing else. They are not used to train models.

Audit logging

Access to driver identity data is logged, and every recommendation is stored with the ruleset version it used.

Records are kept for a default of seven years unless your agreement with us says otherwise.

Incident notification

If a security incident affects your data, we notify you. Our incident-notification commitment, including the timeline, can be provided on request.

Recommendations, not decisions

Indicary recommends and your licensed underwriter decides. Indicary never declines, binds or cancels.

Where the AI sits

AI reads the document. Rules decide eligibility. People make the call.

Security FAQ

Do you pull MVRs from state motor vehicle agencies?

No. You obtain records through your own access and upload or send them to Indicary. Your data provider stays your data provider.

Is our data used to train AI models?

No. Records are used only to produce your recommendations.

Where does AI fit in?

AI reads the document and extracts each entry along with its source text on the record. Your written rules decide eligibility, and your underwriter makes the call. If an entry can't be read with confidence, it's flagged for human review, never guessed.

Does Indicary make underwriting decisions?

No. Indicary returns a recommendation for each driver, with the reasons. Your licensed underwriter reviews and makes every final call, and there are no automated declines.

Can we see who accessed a record and how a recommendation was reached?

We can show how any recommendation was reached: every recommendation is pinned to the ruleset version in force that day. Access to driver data is logged internally; a customer-facing access view is on our roadmap.

What can we send to our security reviewers?

A Compliance & Security Packet can be provided on request, covering our processor terms, how records are handled, and our incident-notification commitments. Request it with the form on this page.

Security & compliance

Reporting a security issue

If you think you've found a vulnerability in indicary.com or the Indicary product, email security_privacy@indicary.com. Include enough detail for us to reproduce it, and please don't access, change or delete data that isn't yours while testing. We'll acknowledge your report and keep you informed until it's resolved. Our security contact is also published at /.well-known/security.txt.

Compliance & Security Packet

A Compliance & Security Packet is available on request.

We'll use your details to send you the Compliance & Security Packet.

Work email only.

Indicary · info@indicary.com · See our privacy policy.

SentRequest received.Thanks, your request is in. We'll promptly email the packet to your work address from sales@indicary.com.
Check your emailWe've sent you a verification link.It expires in 24 hours. After you confirm, your download link works for a few minutes. Nothing in your inbox? Check spam, or request a new link.