Coming in Q1 2027: the first State of Insurance Data Trust report

Insurance runs on data that moves between agencies, MGAs, carriers, reinsurers and the vendors in between. Most of the time, the people that data describes cannot see where it went, and the organizations that collected it cannot always say who has accessed it since. Opaque data resale persists because nobody has to show their work.

The Insurance Data Trust is our attempt to change that by making the practice visible. In Q1 2027 we plan to publish the first State of Insurance Data Trust report. This post explains what the first edition will cover, what it will not do, and how your organization can be counted in it.

Why a report

A pledge is a statement of intent. A report is where intent meets a count. If the industry is going to treat trusted, transparent data as the standard rather than the exception, operators and regulators need a shared, public reference point: how many organizations have committed, how consent and access are actually being handled, and what the pooled data shows when it is examined in aggregate.

The principles behind the Trust are simple to state:

• Every record has an owner.
• Every access is visible and logged.
• Data is shared only with consent.

Stating them is the easy part. The report is how we intend to show, edition by edition, whether they are being practiced. Records in the Trust are secured on InsureBio, the insurance data chain, which is what makes the access record something that can be examined rather than taken on faith.

What the first edition will cover

The first edition is planned around three areas.

Pledge counts

The starting point is the number of organizations that have signed the Insurance Data Trust pledge. A count on its own does not prove good practice, but it does establish a baseline. Future editions can then be compared against it, and anyone reading the report can see whether commitment across the industry is growing.

Consent and access practice

The second area is how consent and access work in practice. The principles say data is shared only with consent and every access is logged. The report will look at how that is being carried out: how consent is recorded, and how access is made visible to the people and organizations it concerns. For agency owners and operations teams, this is the section most likely to be useful when comparing your own process to the practice of other signatories.

Aggregate patterns from the anonymous pool

The third area draws on the anonymous pool. The report will present aggregate patterns only. The point is to show what pooled, consented insurance data can reveal when it is examined openly, without exposing any individual record or the organization it came from.

What the report will not do

A report about data trust has to be held to the standard it describes. So a few things are worth stating plainly:

• It will not identify individual records. Patterns from the anonymous pool are presented in aggregate.
• It will not publish anyone's data without consent. The consent principle applies to the report as much as to any other use of the data.
• It will not rank or name organizations for poor practice. The aim is a shared baseline, not a league table.

We will publish more detail on scope and method on the report page as the first edition takes shape.

Who the report is for

We are writing the report for the people who make decisions about insurance data every day:

• Agency owners who want to show clients that their data is handled with consent and a visible access record.
• MGAs working across several carriers who need a consistent standard they can point to.
• Carrier and reinsurance operations teams who receive data from many sources and need to know how it was collected and shared.
• Regulators looking for an industry-produced, public reference on consent and access practice.

Each group will read it differently. The common thread is that the report gives everyone the same set of facts to work from.

How to be counted

The first edition will count the organizations that have signed the pledge, and signatories will be listed by name in the report. If your organization wants to be part of the baseline, the time to sign is before publication.

Signing means committing to the three principles: every record has an owner, every access is visible and logged, and data is shared only with consent. Organizations that sign appear on the public signatories list now and will be counted in the Q1 2027 edition.

• Read about the report: Insurance Data Trust — Report
• See who has signed, and add your organization: Insurance Data Trust — Signatories

Between now and Q1 2027

The first edition sets the baseline every later edition will be measured against. The more organizations it includes, the more useful that baseline becomes for everyone who relies on it: the operator comparing practice, the carrier assessing a data source, the regulator looking for a public reference.

If your organization already works this way, signing puts that on the record. If it is working toward it, signing is a public commitment to get there. Either way, being counted in the first edition is how you help set the standard rather than wait for one.