Security
Rating is a system of record. We treat it like one.
SelectRate is built and operated by Selectsys Tech LLC. Every rate your underwriters and partners quote runs through this platform, so its integrity, availability and auditability are the product, not a feature of it.
How rating integrity is protected
SOC 2 Type II
Maintained by Selectsys Tech LLC, the company that builds and operates SelectRate. The current report is available to prospective and existing customers under NDA. Ask for it through the contact form or at hello@selectrate.ai.
Encryption
Data is encrypted in transit and at rest. Tokens, secrets, risk documents and worksheet content are never written to operational logs.
Access control
Role-based access across Program Studio, Underwriter Workbench and the Rating API. Signing in to Program Studio and Workbench takes a password and an e-mailed one-time code, and users join an organization by invitation.
API credentials
Each API client has its own Client ID and Client Secret and is granted the specific programs it may rate. The secret is shown once and can be rotated or revoked at any time.
Tenant isolation
A client sees only its own quotes, rating runs, worksheets and policy terms. Anything else is indistinguishable from something that does not exist, so ownership is never revealed.
Rating integrity
Configurations are effective-dated and versioned. A program that is not effective for a quote date returns no premium rather than an incorrect one, and prior versions stay reproducible for the policies written under them. Every operation that changes data requires an idempotency key, so a retried request cannot create a second quote, bind or transaction. Versions and effective dates
Provenance and audit
Every rating step is captured as the engine executes it, with the governing value and where that value came from: a filed source for bureau content, a carrier version for a deviation, a program version for your own rules. Worksheets are printable for the file and reproducible on demand.
Transaction records
Accepted policy transactions never change. Every quote, policy and worksheet records the rating version it was produced with, and a factor override on an endorsement or cancellation carries its reason, who made it and when.
Availability
The Rating API carries your quoting flow and your partners’. Availability commitments, including any service levels, are set in your written agreement rather than on this page.
Responsible disclosure
Report a suspected vulnerability to security@selectrate.ai. We acknowledge every report and will keep you updated until it is closed.
Security review before a demo?
Send us your questionnaire. We would rather answer it up front than halfway through a procurement cycle.