How Bindflow handles your data.
Last updated: April 17, 2026
Who we are
Bindflow, Inc. (“Bindflow,” “we,” “us”) provides AI-assisted commercial insurance submission software to independent agencies.
Data we process
We process data that agencies upload or forward: ACORD forms, loss runs, SOVs, policy documents, submission correspondence, and carrier responses. We also process account-level metadata (producers, CSRs, book mix) to improve matching accuracy. We do not intentionally collect data about consumers; the applicable legal basis is a business-to-business service contract with the agency.
How we use it
(1) To deliver the service: extract structured data, match to carrier appetite, draft submissions, track responses. (2) To improve Bindflow’s own appetite graph for the agency’s benefit, in aggregated and de-identified form. (3) To operate our business: billing, support, security monitoring.
What we do NOT do
We do not sell agency or insured data. We do not use agency submissions to train foundation models. We do not share individual submissions between agencies. We do not enrich or resell PII.
Subprocessors
Anthropic (LLM inference), AWS (hosting), Stripe (billing), Postmark (transactional email). Current list always available at security@bindflow.co. 30-day notice on additions.
Retention
Document retention is configurable per agency, default 90 days. Account records retained for the duration of the contract plus 12 months. Audit logs retained 24 months. Deletion requests honored within 30 days.
Your rights
Agencies may export, correct, or delete tenant data at any time through the admin dashboard or by request. For consumers whose data appears incidentally in uploaded submissions, please contact the agency directly; Bindflow acts as a processor on their behalf.
Contact
privacy@bindflow.co · Bindflow, Inc., [address pending Delaware incorporation].