Insurance Agency IT SupportApplied Epic. AMS360. HawkSoft.
NY DFS Part 500. Protected.

Our IT support for insurance agencies includes AMS uptime monitoring and support (Applied Epic, AMS360, HawkSoft, EZLynx, Vertafore, and others), NY DFS Part 500 cybersecurity program development and maintenance, NAIC Insurance Data Security Model Law compliance for NJ and CT agencies, client data protection and access controls, 24/7 NOC and SOC monitoring, endpoint security and EDR, email security, backup and disaster recovery, and on-site support across NJ, NY & CT — all under a flat monthly rate per user with no per-ticket charges.

Yes. NY DFS Part 500 applies to entities licensed, registered, or required to be licensed or registered by the New York State Department of Financial Services — which includes insurance agencies licensed in New York. The regulation requires a documented cybersecurity program including a CISO designation, annual risk assessment, specific technical controls (MFA, encryption, access controls, incident response, penetration testing), and annual certification to the DFS Superintendent. Agencies that operate across state lines but are licensed in NY are covered. Many agencies are unaware of the full scope of these obligations or haven't implemented programs that would withstand DFS examination. Gradius builds and maintains compliant programs specifically for NY-licensed insurance agencies.

Yes. We support the major Agency Management System platforms used by insurance agencies — Applied Epic (both cloud-hosted and on-premise), Vertafore AMS360, HawkSoft, EZLynx, Agency Matrix, and others. We understand how each platform connects to carrier portals, rating systems, document storage, and agency workflows — and troubleshoot AMS-related IT issues with the operational context of an insurance agency rather than treating them as generic software tickets. We also manage licensing and support coordination with AMS vendors when escalation is needed.

A data breach at an insurance agency creates multiple categories of exposure. First, regulatory: NY DFS Part 500, the NAIC model law, and state breach notification statutes all create notification and remediation obligations that generate legal costs and potential fines. Second, E&O: carriers writing professional liability coverage for insurance agencies will examine the security controls in place at the time of a breach — inadequate controls can create coverage disputes or exclusions. Third, client loss: clients whose personal data is exposed have legitimate reasons to move their business. The combination of regulatory exposure, E&O risk, and client impact makes client data security one of the highest-stakes technology decisions an agency makes. Gradius implements controls that reduce the probability of a breach and document a reasonable security standard that supports E&O coverage defense if one occurs.

Most insurance agencies are fully onboarded within 1–2 weeks. Our engineers handle the complete transition — auditing the AMS infrastructure, deploying monitoring and security agents, beginning the NY DFS Part 500 and NAIC compliance assessment, and meeting your team — without disrupting active client service workflows. For agencies with pressing compliance timelines — a DFS examination approaching, a carrier audit, or a pending E&O renewal — we can prioritize the compliance assessment and documentation work on an accelerated schedule.

No long-term lock-ins. We offer month-to-month and annual agreements — your choice. Insurance agencies stay with Gradius because the AMS runs reliably, compliance programs are maintained without requiring internal staff to become cybersecurity specialists, and client data is protected in a way that supports both regulatory standing and E&O coverage. We earn the renewal every month through performance.