Read your book without seeing raw data

The Book of business tab shows every policy your org has written — but with a hard privacy boundary built into the platform.

Aggregated views only:
• You see whether a policyholder qualifies for a discount tier — never the raw signal data behind it. The HRV number, the sleep score, the telematics trace: those stay with the policyholder. You get the qualification result, not the inputs.

Every read is logged on their side:
• When you pull a policyholder's qualification view, that read is recorded on the policyholder's own "Carrier reads" log, with a timestamp. The transparency runs both ways — you can underwrite, and they can see you doing it.

Why it's built this way:
• Consumers share more when they trust the boundary won't move. By making "carriers never read raw data" a platform guarantee — enforced in code and audited on the consumer side — Underwriting lets you price on real signals while the policyholder keeps ownership of the data itself.

This is what makes the marketplace work: better-priced offers for carriers who respect the ratchet, and a provable privacy line for the people they cover.