.svg){kind=logo}
.png)
Insurance is one of the most regulated industries in the world. When you're building AI that transforms how insurers assess risk, detect fraud, and manage claims, your own security posture has to be airtight.
Anaira is an AI-powered risk intelligence platform built for the insurance industry. Their technology helps insurers verify identities, assess risk consistently, detect anomalies in real time, and resolve claims with evidence-backed decisions. The data they handle spans health underwriting, auto claims, and group insurance, all of it sensitive, all of it regulated.
For insurance companies evaluating Anaira, compliance isn't a nice-to-have. It's a prerequisite. ISO 27001 certification was the first step in proving that Anaira's platform meets the security standards the industry demands.
Why ISO 27001
Insurance companies operate under strict regulatory frameworks. Before they'll integrate a third-party AI platform into their risk workflows, they need to know that platform meets internationally recognized security standards.
ISO 27001 gives Anaira that proof. It signals to insurers, regulators, and partners that information security is managed systematically, not ad hoc.
Anaira is also exploring SOC 2 and ISO 42001 (the AI management system standard) as additional frameworks, building a compliance foundation that scales with the product.
The Evaluation
Anaira didn't rush in. Before signing, Kisalay Madhup Gaur ran a thorough evaluation of ComplyJet over several weeks, testing the platform in a sandbox environment.
The evaluation was detailed:
- Tested AWS integration across multiple accounts (Anaira runs 4 AWS accounts including a management account)
- Explored the policy wizard and evidence collection workflows
- Evaluated the Device Agent for macOS, which would eliminate the need for a separate MDM purchase
- Asked about multi-framework pricing for adding SOC 2 and ISO 42001 later
Only after validating that ComplyJet could handle their specific setup did the team move forward.
Getting Started
Once onboarded, Kisalay moved quickly. The team connected their infrastructure and started working through ISO 27001 tasks:
- AWS integrated across their multi-account setup
- ComplyJet's Device Agent deployed on macOS machines, replacing the need for a standalone MDM tool
- Security policies generated and distributed to employees for review and acceptance
- Employee onboarding expanded as more team members were added to the platform for training and compliance tasks
Where Anaira Stands Today
Anaira is actively building their ISO 27001 readiness. The team is working through the full scope of requirements:
- AWS integrations connected and monitored
- Device Agent installed across the team's Mac fleet
- Security policies drafted, approved, and accepted by employees
- Access management process designed and operational
- Employee training underway
The foundation is in place. The team is methodically working through the remaining tasks with a clear path to certification.
Why This Matters
Insurance technology companies face a unique challenge. Their customers are regulated entities with strict vendor requirements. A startup selling to insurers can't afford to treat compliance as something they'll "get to later." It needs to be part of the product story from the beginning.
Anaira understood this early. By pursuing ISO 27001 now, while the team is still small and the product is scaling, they're building compliance into their operations rather than retrofitting it later.
For insurance companies evaluating Anaira, ISO 27001 certification will be the difference between "let's keep talking" and "let's move forward."
Looking Ahead
Anaira is on track for ISO 27001 certification, with SOC 2 and ISO 42001 as planned next steps. With ComplyJet's multi-framework platform, adding those frameworks won't mean starting over. The policies, controls, and evidence already in place will carry forward.
When the next insurer asks about Anaira's security posture, the answer will be comprehensive: ISO 27001 certified, SOC 2 attested, and ISO 42001 aligned. That's a compliance story that matches the ambition of the product.
