Launching an Insurtech platform with SAANS health

SAANS Health's proprietary AiQ platform needed to power a new InsurTech marketplace that would let small and medium businesses negotiate cost-optimized insurance plans. That meant integrating AiQ seamlessly within the platform, solving the constantly evolving complexity of carrier integrations to extract and retrieve claims data through SMBs, and setting up strict user authentication and continuous HIPAA compliance around sensitive health data.

We ran an architecture sprint to create a logical and technical architecture. Some heuristic decisions were made over tech-stack choices. The platform leverages the modular benefits of a microservices architecture. The front-end was built using React JS, and using atomic design principles. Backend was built using Spring Boot. QA automation, CI/CD, etc. were of course built into the delivery lifecycle.  

• The core of the platform: Access to health data is critical for SMBs to negotiate and procure cost-advantaged health insurance. At the core of the platform is a member-mediated data retrieval system that fetches member data from insurance carrier portals, using Selenium-based robotic process automation and secure API interfaces to retrieve data on the member's behalf. AiQ analyzes this data and generates reports that help SMBs negotiate better deals for their employees, while insurance vendors use the insights to provide informed proposals. A RabbitMQ messaging layer queues the extraction process, allowing the platform to balance load optimally.

• Field matching and alignment: The workflow for the SMB marketplace required vendors to submit their proposals into the system. Due to the variability in the inputs from the various vendors, we incorporated a fuzzy search mechanism to create consistency in the representation of the various quotes to the end user, so that they can easily compare and select.

• Security measures - encrypted at rest, and access-controlled: Access to the sensitive health data of an individual from within an insurance carrier’s database is member-controlled. Okta gates access to this health data (from any other insurance provider or employer) within the InsurTech platform with strict user authentication protocols.
  The secrets management process stores the member credentials in the database in an encrypted state. This is decrypted only when the Selenium bot needs to run the API call into the insurance provider’s database. All member information for access to API-based data sources is stored in GitHub Secrets, ensuring end-to-end security.

• Mapping system for the database: A mapping system was built to give developers more control over the data retrieval and transformation process. This allowed for consistency of processing through the AiQ platform.

In the end, it was a clear win - Zemoso helped the Insurtech client onboard their first customers and pressure-test the platform they'd built together.