Insurance web aggregator compliance requires secure data systems, annual audits, restricted website operations, and prescribed corporate identification.

Insurance Web Aggregators must maintain secure information systems, encrypt lead and other data transmissions, and use approved payment gateways when collecting premiums for insurers. Their websites, portals, lead-management systems and India-hosted data centres require annual audit by a CERT-In empanelled information-security auditing organisation, followed by timely submission of audit reports. IWAs must also obtain annual compliance certifications, tag policies sold by Authorized Verifiers for tracking, comply with restrictions on displayed products and websites, and use prescribed nomenclature and registration disclosures.

---

---

---