1. Scope & Role as Data Processor
Voiie, Inc. ("Voiie", "we", "us", "our") operates primarily as a B2B technology consulting agency and software integrations developer. In delivering rating systems, AMS bridges, and CRM services, we act as a Data Processor on behalf of our corporate clients (carriers, MGAs, brokers), who serve as the Primary Data Controllers.
We process policyholder personal identifiable information (PII), agency financial commission logs, and premium transaction accounts solely under direct written instruction from our clients. We do not sell, rent, or lease any policyholder records or commercial hazard details to third-party databases.
2. PII Ingestion & Secure VPC Tenant Isolation
To ensure total integrity, Voiie maintains a highly isolated, multi-tenant cloud framework within our secure virtual private cloud (VPC). Client databases, actuarial rating formulas, and AL3 ACORD file directories are strictly insulated from public-facing interfaces and other tenants using separate logical divisions, strong firewall filters, and dynamic encryption keys.
All sensitive personal information (including social security numbers, policyholder names, risk locations, and billing details) is fully encrypted at rest using AES-256 algorithms and protected during transit via TLS 1.3 protocol standards.
3. Regulatory Compliance Alignments
Voiie constructs and maintains all custom software systems in strict alignment with state and national insurance regulatory requirements:
- NAIC Model Law: Our coding practices and database security protocols explicitly satisfy the National Association of Insurance Commissioners (NAIC) Insurance Data Security Model Law.
- NYDFS Part 500: Voiie integrates active intrusion monitoring (SIEM), continuous vulnerability auditing schedules, data access limits, and annual executive compliance reporting modules for clients subject to New York State Department of Financial Services (NYDFS) regulations.
- California CCPA / CPRA: We facilitate the instant execution of "Right to Know", "Right to Delete", and "Do Not Sell" requests for consumer policyholder databases.
- HIPAA Security Standards: For systems handling accident or health lines of authority, our cloud integrations feature full business associate agreement (BAA) eligibility and absolute logging protections.
4. Lead Generation & TCPA Disclosures
Our retail agent marketing suites, local quote triage pages, and outbound email sequences feature explicit double opt-in logs. We maintain exact records of timestamped opt-in consents, device IDs, and consent texts to satisfy all Telephone Consumer Protection Act (TCPA) and CAN-SPAM directives. If a user chooses to opt out, their suppression status is immediately synced with direct billing and outbound dialing modules.
5. Contact Information
For questions regarding our information security practices, VPC boundaries, or to initiate a privacy audit request, contact our security officer at:
Voiie, Inc. Security & Compliance Operations
Email: info@voiie.com
Direct phone: (626) 226-2333
