Fintech · Insurtech · 200–1000 · Europe #b010_03

Context

We provide digital health insurance for employers and their staff, combining cover with care services in one app. We handle sensitive health data across several countries and build a lot in-house.

Industry

Fintech · Insurtech

Size

200–1000 employees

Region

Europe

Tools budget

$5K–20K per month

Needs

Audit evidence collection. Collecting evidence for several overlapping security and resilience regimes is still manual; we want it scripted directly from our engineering systems.

Today: a security GRC engineer is replacing manual collection with scripts over engineering systems · Urgency: now

Threat detection & response. We are standing up security operations and need detection and response that understands our cloud environment without a large analyst team.

Today: a new security lead owns detection and AI-era security across several countries · Urgency: now

LLM evaluation & testing. Our AI agents handle real member requests, so we need evaluation that reflects real-world outcomes, not just headline benchmark scores.

Today: platform engineers build sandboxed agent testing with continuous-integration guardrails · Urgency: later

Who decides

ciso security · security review

Expects from suppliers

API-first so our engineers can automate everything; Hosting compatible with health data certification requirements; Clear mapping to European financial resilience rules

Not a fit

Consultancy-led compliance with no automation; Tools that require sending health data outside Europe

Stack

cloud: AWS-class hyperscaler, compliance tooling in place, LLM APIs in production, CI/CD pipeline in place

Buying triggers

regulatory change, AI adoption push