For insurance agencies
Utah requires licensed agents to have a written security program. Most independent agencies don't.
Utah Insurance rule R590-216 requires licensed producers and agencies to maintain a Written Information Security Program — documented administrative, technical, and physical safeguards for the customer data you hold. If you're an independent agent, this is on you: you're not covered under a carrier's corporate program. Kovyr writes your program and keeps it current.
A written program is also your legal safe harbor.
Under Utah's Cybersecurity Affirmative Defense Act, a business that maintained a written security program conforming to a recognized framework has an affirmative defense to certain data-breach claims. In plain terms: having the program isn't just a box to check for the regulator — if you're ever sued after a breach, it's the documentation that lets you argue you did the right things. Not having one removes that defense entirely.
What's included
Written Information Security Program
The document itself — your administrative, technical, and physical safeguards, mapped to Utah rule R590-216.
Risk Assessment
Where customer data lives, the threats to it, and your current posture on each safeguard.
Incident Response Plan
Who does what if data is exposed, the notification steps, and the response procedures.
Program Coordinator Designation
Names the person accountable for the program and the review cadence that keeps it current.
How it works
1 · Free scan
See what an attacker or an auditor can see from the outside — in seconds, no obligation.
2 · Compliance Assessment
We collect your answers, run the analysis, and deliver your written security program. From $399.
3 · Trusted-Advisor Plan
Optional: we keep it current, help close the gaps, and monitor your exposure. $199/mo.
Start with a free look at your agency
Free, instant, and passive — we only read public information, the same as an attacker or insurance auditor would.
Ready for your security program?
Book your Compliance Assessment — quoted per agency, from $399.
Book your assessmentKovyr produces compliance documentation reflecting your agency's information and our external observations. It is not legal advice, not a penetration test, and not a certification.