Introducing the Insurance Data Trust: every record has an owner, every access is visible

Insurance runs on data that someone else usually controls. An agency writes a policy, a carrier prices it, a reinsurer models it, and somewhere along the way the record behind it gets copied, enriched and passed on. The people who created that record rarely know where it went, who looked at it, or whether they agreed to any of it.

Today we are publishing the Insurance Data Trust manifesto. It sets out three principles for how insurance data should be handled, and it comes with a five-commitment pledge that is live now. The shared tools that put these principles into practice launch with Voyager.

This post explains what the three principles mean, why we think they matter to everyone who touches an insurance record, and what you can do today.

The problem: opaque data resale

The practice we are writing against has a plain name: opaque data resale. A record is collected for one purpose, then sold or shared for another, without the originator seeing the transaction and without a log anyone outside the reseller can read.

For an agency owner, that means client data you gathered may be working for someone else. For an MGA or a carrier operations team, it means you cannot always trace the lineage of the data you are pricing against. For a regulator, it means accountability depends on records that the people being regulated may not be able to produce.

None of this requires bad intent. It is what happens when data has no clear owner and access leaves no visible trail. The manifesto is our attempt to fix the structure, not to assign blame.

Principle one: every record has an owner

Every record in the Insurance Data Trust has an owner. Not a vague sense of who probably created it, but a named owner attached to the record itself.

Ownership is the starting point for everything else. If you do not know who owns a record, you cannot ask them for consent, you cannot tell them who accessed it, and you cannot hold anyone accountable when it is misused. Once ownership is explicit, the other questions have someone to answer to.

For an agency, this is the difference between hoping your data is handled properly and knowing that it is yours to govern.

Principle two: every access is visible

Every access to a record is visible and logged. When someone reads, uses or receives a record, that event is recorded, and the owner can see it.

This is the principle that turns trust from a promise into something you can check. Operations teams can trace where the data behind a decision came from. Owners can see who has used their records. Regulators can review a log instead of reconstructing history from emails and spreadsheets.

Visibility also changes behaviour. When access is logged and the owner can see it, the incentive to quietly pass data along goes away.

Principle three: sharing happens with consent

Data is shared only with the owner's consent. Not implied consent buried in a contract signed years ago, but consent tied to the sharing itself.

Consent is what makes the first two principles useful. Ownership tells you who decides. Visibility tells you what happened. Consent means the owner decided before it happened.

This does not mean data stops moving. Insurance depends on records flowing between agencies, MGAs, carriers and reinsurers. The point is that each of those flows is one the owner agreed to and can see.

The pledge is live now

The Insurance Data Trust pledge sets out five commitments that put the three principles into practice. It is live today.

We published the pledge before the tools on purpose. The principles should stand on their own, and organisations should be able to commit to them on the merits, not because a product requires it. Read the five commitments in full on the pledge page and decide whether they describe how you want your data handled.

The shared tools launch with Voyager

Principles need infrastructure. The shared tools that make ownership, visible access and consent workable day to day launch with Voyager.

The Insurance Data Trust is secured on InsureBio, the insurance data chain. That is where ownership is recorded and where the access log lives, so the record of who owns what and who accessed it does not depend on any single party's internal systems.

We will share more about the tools as Voyager approaches. In the meantime, the manifesto and the pledge are the place to start.

Who this is for

We wrote the manifesto for the people who handle insurance data every day:

• Agency owners who collect client data and want to know where it goes.
• MGAs who need to trust the data they underwrite against and show where it came from.
• Carrier and reinsurance operations teams who need lineage they can trace.
• Regulators who need accountability that rests on records, not reassurance.

Each group has a different reason to care, but they share the same need: data that has an owner, a visible history and a consent trail.

What to do next

1. Read the Insurance Data Trust manifesto.
2. Review the five commitments in the pledge.
3. Share both with the people in your organisation who are responsible for data, compliance and partner relationships.

Trust in insurance data should not be something you are asked to assume. It should be something you can see. That is what the Insurance Data Trust is for.