Security at Marin
Your underwriting edge belongs to you.
Your submissions, pricing, and policy records are the foundation of your business. Protecting them is part of how we build and operate Marin.
Our philosophy & commitments
Your data serves
your business.
Your data has a defined purpose.
Your organization’s information is used to deliver the insurance workflows you authorize. Any additional use requires your prior written consent.
Your data does not train third-party models.
Your organization’s data is not used to train, fine-tune, or improve third-party AI models. AI providers and use cases are reviewed under our vendor and data-governance policies.
Authority stays with your team.
AI supports your workflows within defined permissions. People remain responsible for underwriting decisions.
Trust is reviewable.
Clear policies, recorded actions, and independent examinations give your team a basis for evaluating our controls.
Our security posture
Protection, built into the work.
Technical safeguards and operating practices work together to protect the information your team relies on.
Encrypted in transit and at rest
Our encryption standards require AES-256 or equivalent protection at rest and TLS 1.2 or higher in transit.
Access follows responsibility
Role-based permissions and least-privilege access limit information and actions to the people who need them.
Customer data stays separated
Customer identifiers and authenticated account boundaries scope access to each organization’s information.
Changes leave a record
Audit trails support accountability for actions and changes, helping your team understand what happened and who was involved.
Security is an operating discipline
Access reviews, vulnerability management, vendor reviews, and security training are part of our information security program.
Prepared to detect and respond
Monitoring and documented incident response procedures guide how we identify, investigate, and respond to security events.