A few obligations shape almost every IT decision in an insurance practice. Your IT provider should understand what they are and how they translate into systems.
Privacy Act 2020. Sets the baseline for how personal information is collected, stored, used and disclosed. The Office of the Privacy Commissioner expects notification of a notifiable privacy breach without undue delay. For an insurance firm, almost everything you handle, from quote data to claims files, is personal information in scope.
Financial services conduct obligations. Licensed financial advice providers and insurers operate under Financial Markets Authority oversight and the fair-conduct expectations of the financial services regime. Those obligations assume client records are accurate, available when needed, and protected from unauthorised access, which makes reliable, well-secured IT a conduct issue, not just a technical one.
Client confidentiality. Beyond formal regulation, your clients trust you with sensitive personal and financial detail. Maintaining that confidentiality means strong access control, encryption, audit logging of who accessed what, and secure channels for sharing documents.
Business continuity. Insurance demand is not evenly spread. Major weather events and large claim surges put concentrated load on your systems at exactly the moment policyholders need you most. Continuity planning, tested recovery and resilient infrastructure are core to operating responsibly.
In practice that translates to a specific set of IT controls: multi-factor authentication everywhere, confidential documents labelled and access-logged, encrypted backups with tested restores, secure remote access for assessors, defensible retention of records, and a breach-response runbook your senior staff can run under pressure.
The systems NZ insurance firms run, and what we do with each
We are platform-agnostic but practical. We secure and support the everyday systems an insurance brokerage or advice firm depends on, whichever vendors you have chosen.
- Broking, policy administration & claims systems: we keep your line-of-business applications available, backed up and integrated with a secure Microsoft 365 environment, whichever platform you run
- Document management: SharePoint and OneDrive with structured access controls, sensitivity labelling and version history for policy and claims files
- Client and underwriter exchange: secure portals and protected file sharing in place of open email attachments
- Email and collaboration: Microsoft 365 with conditional access, multi-factor authentication and email security tuned to filter phishing and impersonation
- Identity and access: Microsoft Entra identity management, conditional access and least-privilege permissions across your applications
- Endpoint and mobile: managed, encrypted devices and endpoint protection for office staff and field-based assessors alike
- Backup and recovery: encrypted backup with tested disaster recovery for your core systems and data
We are not selling you a broking or claims platform. We make sure the systems you have chosen work properly together, with the security, backup and audit evidence your privacy and conduct obligations expect. If a decision is genuinely complex, such as a cloud migration or a major platform move, we run a structured assessment before recommending anything.
