.svg){kind=logo}
.png)
Insurance is one of the most regulated industries in the world. When you're building AI that transforms how insurers assess risk, detect fraud, and manage claims, your own security posture has to be airtight.
Anaira is an AI-powered risk intelligence platform built for the insurance industry. Their technology helps insurers verify identities, assess risk consistently, detect anomalies in real time, and resolve claims with evidence-backed decisions. The data they handle spans health underwriting, auto claims, and group insurance, all of it sensitive, all of it regulated.
For insurance companies evaluating Anaira, compliance isn't a nice-to-have. It's a prerequisite. ISO 27001 certification was the first step in proving that Anaira's platform meets the security standards the industry demands.
Why ISO 27001
Insurance companies operate under strict regulatory frameworks. Before they'll integrate a third-party AI platform into their risk workflows, they need to know that platform meets internationally recognized security standards.
ISO 27001 gives Anaira that proof. It signals to insurers, regulators, and partners that information security is managed systematically, not ad hoc.
An Evaluation That Took Its Time
Anaira didn't rush in. Before signing, Kisalay Madhup Gaur ran a thorough evaluation of ComplyJet over several weeks, testing the platform in a sandbox environment. He tested AWS integration across Anaira's four AWS accounts (including a management account), explored the policy wizard and evidence collection workflows, and evaluated the Device Agent for macOS specifically because it would eliminate the need to buy a separate MDM tool. Only after validating all of that did the team move forward.
Getting Started, Then Moving Fast
Once onboarded, Kisalay moved quickly. AWS was integrated across the multi-account setup, ComplyJet's Device Agent was deployed on macOS machines, security policies were generated and distributed for employee review and acceptance, and the team expanded as more employees were added for training and compliance tasks.
ISO 27001: Certified
Anaira's ISO 27001 certification is complete — the platform's information security management system has been independently audited and certified. For an insurance-adjacent AI company, that's the credential that turns a sales conversation from "let's keep talking" into "let's move forward."
Building on That Foundation: SOC 2
Devang Mundhra, Anaira's CTO, is the formal signatory on a SOC 2 Type 2 engagement now underway — a deliberate second framework rather than a reactive one, building on the same policies, controls, and evidence base ISO 27001 already put in place. Running SOC 2 on top of an existing ISO foundation means less duplicated work than starting either framework cold.
Why This Matters
Insurance technology companies face a unique challenge. Their customers are regulated entities with strict vendor requirements. A startup selling to insurers can't afford to treat compliance as something they'll "get to later." It needs to be part of the product story from the beginning.
Anaira understood this early. By pursuing ISO 27001 while the team was still small, they built compliance into their operations rather than retrofitting it later — and now they're stacking a second framework on top of it rather than starting from scratch.
Looking Ahead
ISO 27001 is certified. SOC 2 Type 2 is underway, reusing the same operational foundation. When the next insurer asks about Anaira's security posture, the answer keeps getting more complete.
