Skip to content

For the Most Sensitive Operations

Clarix keeps policyholder and claimant data safe with enterprise-grade security and data privacy controls.

Explore Trust Center

Enterprise-Grade Protection

Security

Purpose-Built Security

A dedicated security program spans infrastructure, product and operations, with the enterprise controls regulated teams expect: SAML SSO, audit logs, role-based access and data lifecycle management.

Control

Data Sovereignty and Control

You keep full control of your data. Decide which systems and documents agents can access, set retention policies and delete data at any time.

No training

No Model Training

Models are never trained on your data or your customers’ PII. Your submissions, claim files and outputs stay yours.

Compliance

Full Audit Lineage

Every action an agent takes is logged with its source document and the rule that drove it, ready for state-level compliance review.

Commitments

Enforceable Commitments

Our security terms include binding commitments on data protection, data access and incident notification. [Confirm before launch]

Testing

Independently Tested

Regular third-party penetration tests and audits validate our controls, with reports available under NDA. [Confirm before launch]

Enterprise-Grade Security and Controls

Clarix is built for regulated industries by design. Models are never trained on PII, and full audit lineage tracks every action for state-level compliance. We include the default controls enterprise teams expect: SAML SSO, audit logs, role-based access, data lifecycle management and more.

Explore Trust Center

Security is Fundamental to Everything We Do

We protect data at every level, from user authentication and access controls to continuous monitoring and audit. Our approach pairs modern security practice with the governance insurance requires.

Explore Trust Center

Customer data is any data you or your users provide to Clarix, including broker emails, ACORD forms, loss runs, policy and claim records, and the outputs agents produce from them.

Data is encrypted at rest and in transit, access is restricted by role, and every access and agent action is logged. [Add your specific controls.]

[Add your hosting regions and cloud providers.] Data residency options are available for regulated books of business.

Agents run on scoped service accounts and inherit the permissions you set by workflow, queue and line of business, with logical separation between workspaces.

No. Models are never trained on your data or your customers’ PII, and model providers are contractually prohibited from doing so.

Yes, within your own workspace. When a case is flagged for human review, agents learn from how your team resolves it. That learning is never shared with other customers.

[Add your audit, vulnerability scanning and penetration testing cadence.]