For insurance agencies
If you write personal lines in Utah, rule R590-216 requires a written security program. We write it for small agencies.
Utah Insurance Department rule R590-216 says a licensee that obtains nonpublic personal information from its customers “shall implement a comprehensive written information security program” — administrative, technical, and physical safeguards “appropriate to the size and complexity of the licensee.”
That includes licensed producers, and the rule has no small-office exemption; a small agency's program can be small. The rule's “customers” are people buying personal, family, or household coverage, so if every policy you write is for a business, commercial, or agricultural purpose, check with the Utah Insurance Department first — it may not apply to you.
Kovyr writes your program, and can keep it current if you want that.
What's included
Written Information Security Program
The document itself — your administrative, technical, and physical safeguards, organized around Utah rule R590-216-4 and sized to your agency.
Risk Assessment
Where customer data lives, the threats to it, and your current posture on each safeguard.
Incident Response Plan
Who does what if data is exposed, the notification steps, and the response procedures.
Program Coordinator Designation
Names the person accountable for the program and the review cadence that keeps it current.
How it works
1 · Free scan
See what anyone outside your agency can see — in seconds, no obligation.
2 · Compliance Assessment
We collect your answers, run the analysis, and deliver your written security program. Quoted per agency, from $897; annual update from $297/yr.
3 · Monitoring
Optional: recurring external monitoring with your documentation kept current — $99/mo, or $990/yr.
Start with a free look at your agency
Free, instant, and passive — we only read what’s publicly visible about your domain: its email and DNS records, and its website if it has one.
Ready for your security program?
Book your Compliance Assessment — quoted per agency, from $897.
Book your assessmentReplies usually within one business day.
Kovyr produces compliance documentation reflecting your agency's information and our external observations. It is not legal advice, not a penetration test, and not a certification.