Controls and audit
Show your carriers exactly who did what.
Role-based permissions, MFA on every sign-in and an append-only audit log of every change. The controls your capacity providers ask about, built in.
Role · Underwriter
Permissions that match your authority
Users get a role. Roles get policies. Policies grant permissions, down to each screen and action.
- Roles such as underwriter, senior underwriter and accounts
- Read, write, delete and export granted separately
- Admins manage roles and policies without a code change
- Separate admin and internal portals

Audit export
Q3 2026 · 18,240 events
An audit trail that can't be edited
Every write is logged with who did it, their role, when, from where and the values before and after.
- Append-only: entries are never updated or deleted
- Who, role, IP address and the change itself on each entry
- Kept when a user leaves the business
- Filter, search and export for carrier audits
Also in Controls and audit
Built for audits.
Multi-factor sign-in
MFA for every user, with set-up and recovery built in.
Role-based access
Users, roles, policies and permissions, managed by your admins.
Append-only audit log
Designed to support ISO 27001-style controls. Viewable and exportable.
Integrity checks
Automated checks that the ledger and policy records agree.
Peer review
Second-underwriter approval, recorded on the file.
Referral routing
Risks outside authority go to the right person before a quote goes out.
See it with your own submissions.
A 30-minute walkthrough on your lines, your forms and your binders.
Book a demo