Verified Bio-ID profiles now earn PolicyPoints

Bio-ID now awards PolicyPoints when a profile is completed through email and phone verification. The two steps can happen in either order. Finish both and the profile counts as complete.

This post covers what changed, why verified identity matters for insurance data, and where PolicyPoints fit.

What changed

Until this deploy, finishing your Bio-ID profile was its own reward. You got a working identity and nothing more. Now a profile completed through email and phone verification also earns PolicyPoints.

The change shipped as a Bio-ID deploy and is listed in the Tawa what's new log.

It does not change:

• What verification asks of you.
• What information a profile holds.
• Who can see your data.

The only new part is that completing verification is now recognised.

Either order, same result

People reach verification in different ways:

• An agency owner may confirm an email address during sign-up and come back to the phone step a week later.
• An operations lead at an MGA may start on mobile and confirm the phone number first.

Both paths now end in the same place. Once both email and phone are verified, the profile is complete and PolicyPoints are awarded. Nobody has to redo a step because they did things in an unexpected sequence.

This is a small detail, but it matters. When a system only works if you follow its preferred sequence, people stall halfway. We would rather have more verified profiles than enforce an order that adds nothing to the result.

Why verified identity comes first

InsurEco is working to make trusted, transparent insurance data the industry standard. That rests on three commitments:

• Every record has an owner.
• Every access is visible and logged.
• Data is shared only with consent.

Each of these depends on knowing who is on the other end.

Ownership only means something if the owner is a real, reachable party. A record tied to an unverified account is owned in name only. If nobody can confirm who controls it, nobody can confirm who agreed to share it.

Access logs are only as useful as the identities in them. A log entry that says an anonymous account viewed a record tells an agency, a carrier or a regulator very little. A log entry tied to a verified profile tells them who looked.

Consent is a decision made by a person or organisation. Consent from an unverified identity is hard to rely on, both for the party receiving the data and for anyone reviewing the trail later.

Email and phone verification are not the whole of identity. They are a practical floor. They confirm that a profile is connected to channels a real party controls and can be reached through. Bio-ID treats that floor as the starting point for everything else.

The contrast with opaque data resale

Much insurance data still moves through opaque data resale. Records are collected, bundled and sold on. The people and businesses they describe often cannot see who bought them or why. Ownership is unclear, access is invisible and consent is assumed rather than given.

Verified identity is part of how we take apart that pattern:

• When contributors are verified, the chain of custody for a record starts with a known owner.
• When requesters are verified, every access in the log points to someone accountable.

That is the difference between data you can trace and data you have to take on faith.

Bio-ID profiles and the activity tied to them are secured on InsureBio, the insurance data chain.

Where PolicyPoints fit

PolicyPoints are a way of recognising participation that strengthens the network. Completing verification is one of those actions, so it now earns them.

We want to be clear about proportion. PolicyPoints are a supporting acknowledgement, not the reason to verify. The reasons to verify are the ones above:

• Your records have a confirmed owner.
• Your access to others' data is logged under your name.
• Your consent decisions carry weight.

If the points help someone finish a step they had left half done, good. Verification is still worth doing without them.

This post does not cover point amounts or what PolicyPoints can be used for. Please do not treat PolicyPoints as an investment or a store of value. They recognise participation in a data network built on ownership, visibility and consent.

Who this is for

Agency owners. A verified profile means the records your agency contributes are tied to you, and you can see who has accessed them.

MGAs and carrier or reinsurance operations teams. Verified counterparties make access logs useful in audits and reviews. You can answer the question of who saw what without reconstructing it from email threads.

Regulators. Verified identity at the profile level is the base layer for a consent and access trail that can actually be examined.

What to do now

1. If your Bio-ID profile is incomplete, finish whichever step is left, email or phone. The order does not matter.
2. If you have already verified both, there is nothing more to do.
3. If you manage a team, ask each member to complete verification. Every access your organisation makes is then tied to a verified person.

The change is small and the reason behind it is not. Trusted insurance data starts with knowing who owns it, who touched it and who agreed to share it. Verification is where that begins.

Read this announcement at blog.insureco.io.