[Free PDF] Agency Management System Security Checklist: What to Look for in a Secure AMS

Client records, policy history, and sensitive documents all live inside your agency management system (AMS). Use this checklist to evaluate the security practices behind your current system or one you're considering, from data ownership and access controls to compliance standards and AI safeguards.

Download the Checklist

Is your agency's data secure?

With so much important information in one place, the security standards your AMS vendor follows matter. Whether you're reviewing your current system or vetting a new one, this checklist gives you the right questions to bring to the conversation, with no technical background required.

Inside, you'll find key security terms and definitions, plus questions and controls to look for across six areas:

  • Data Ownership
  • Data Storage & Protection
  • User Access Controls
  • Vendor Security Practices
  • Compliance & Security Standards
  • AI Data Handling & Security Controls

Use what you learn to make sure your AMS vendor protects your agency's information and supports your security and compliance needs.

Download the PDF now!

Which questions does this checklist cover?

The checklist covers questions about topics like:

  • SOC 2 Type II reports and HITRUST certification
  • HIPAA requirements and Business Associate Agreements (BAAs)
  • Data encryption at rest and in transit
  • Data backups and disaster recovery
  • Multi-factor authentication (MFA) and role-based access
  • How AI features store, use, and protect your data

What type of technology can I use this for?

This checklist works best for evaluating an agency management system or an insurance-specific CRM. You can also use it with other technology vendors, like quoting and enrollment platforms, though some questions may not apply. For more questions to bring to your sales demos, check out our other vendor checklists.

Does the checklist cover AI?

Yes. A dedicated section helps you understand how AI features within your AMS handle your agency's information. That includes whether your data could be used to train shared or public AI models, how long AI-related data is retained, and what safeguards protect against unauthorized access.