Fintech · Insurtech · 200–1000 · Europe #b010_09

Context

We sell pricing and rating software to insurers' actuarial teams, delivered as a cloud service to carriers in several continents.

Industry

Fintech · Insurtech

Size

200–1000 employees

Region

Europe

Tools budget

$5K–20K per month

Needs

SOC 2 / ISO 27001 automation. We keep two security certifications current and collecting evidence for both still eats weeks of engineering time.

Today: security team runs annual audits and shares reports via a customer trust centre · Urgency: this year

Audit evidence collection. Insurer security questionnaires keep growing, and answers are scattered across documents and teams.

Today: periodic scans and access reviews gathered manually for yearly independent reports · Urgency: this year

Identity & access management. Access reviews across offices and tools are spreadsheet driven and hard to prove to auditors.

Today: role-based access with biannual reviews run by IT and security staff · Urgency: later

Who decides

ciso security · security review

Expects from suppliers

Automated evidence collection from cloud accounts; Questionnaire answer library; Support for several frameworks

Not a fit

Consultancy-only offerings; Products without SSO

Stack

cloud: AWS-class hyperscaler, compliance tooling in place, CI/CD pipeline in place

Buying triggers

upcoming audit or certification, rapid team growth