# How insurers and brokers can sell data to AI companies

URL: https://sellmydatatoai.net/sell-your-data/insurance

Insurers and brokers can license de-identified claims handling notes, underwriting referral rationale, policy forms they drafted and operating procedures to AI companies. No buyer publishes an insurance-specific price, so value depends on volume, years covered and how cleanly health data can be removed. Settle the health data question first, because state rules based on NAIC Model 672 require authorization to disclose it.

## Key takeaways

- AI buyers most want these records from insurance companies and brokers: (1) claims handling notes and decision letters, de-identified, (2) underwriting referral notes explaining why risks were accepted, rated up or declined and (3) policy forms, endorsements and clause libraries you drafted.
- No AI buyer publishes a price range for insurance companies and brokers yet, so value depends on volume, years of history, structure and how cleanly the rights can be shown.
- Size buyers look for: No insurance-specific minimum is published. micro1 asks for 30 or more full-time staff, and Handshake AI for 20 or more staff and three years in business.
- The first rights issue to clear: GLBA privacy rules for insurers, enforced by state insurance regulators under laws based on NAIC models. This page covers 5 more.
- Sellers pay nothing to be assessed. We charge a success fee only when a deal completes, and the fee is agreed in writing before we introduce you to any buyer.

## At a glance

- Records buyers ask for: Claims handling notes and decision letters, de-identified; Underwriting referral notes explaining why risks were accepted, rated up or declined; Policy forms, endorsements and clause libraries you drafted; Underwriting guides, claims playbooks and procedure manuals; Complaint files and response letters; Broker and carrier placement correspondence, with client names removed
- Why buyers want them: Buyers want records of expert judgment applied to real cases. micro1's published brief asks for SOPs, process documentation, knowledge bases, templates and support tickets, and an insurance file holds all of them.
- Size buyers look for: No insurance-specific minimum is published. micro1 asks for 30 or more full-time staff, and Handshake AI for 20 or more staff and three years in business.
- Rights issues: GLBA privacy rules for insurers, enforced by state insurance regulators under laws based on NAIC models; NAIC Model 672, Section 18: no disclosure of nonpublic personal health information without authorization; Health insurers are HIPAA covered entities, so the Privacy Rule's sale limits apply to their claims data; Consumer reports in underwriting files may be used only for FCRA permissible purposes; Fraud investigation files and producer agreements that limit reuse of client files; UK and EU: UK GDPR Article 9, and a Data Protection Act 2018 insurance condition that does not cover licensing

Insurance files record decisions and the reasons behind them. A claims adjuster's note explains why a claim was paid, reduced or denied, and an underwriter's referral note explains why a risk was accepted at a higher rate. That is the kind of material AI buyers say they want.

micro1, which announced in October 2026 that it would spend $1 billion over 12 months on enterprise operational data, says it is looking for data that shows how work is actually performed within an organization.

## What insurance data do AI companies buy?

AI companies buy insurance data that shows decisions being made on real cases. micro1's published brief lists SOPs, process documentation, knowledge bases, workflows, templates, CRM records, support tickets, project histories and internal communications, and names finance, legal and contracts, and customer support among the functions it wants.

Structured policy data on its own is close to a customer list. The value sits in free text: the notes, letters and referral comments where a person explains a judgment.

| Record | What it shows a model | Main issue to clear |
| --- | --- | --- |
| Claims notes and decision letters | How policy terms are applied to facts | Health and fraud information |
| Underwriting referral notes | How risk is assessed and priced | Applicant identity and consumer reports |
| Policy forms and clause libraries | How coverage is drafted | Forms based on third-party or advisory organization forms |
| Underwriting guides and claims playbooks | How work is organized | Usually low if written in-house |
| Complaint files and responses | How disputes are resolved | Complainant identity and health details |

## How much is insurance data worth to AI buyers?

Insurance data has no published price. None of the buyers whose terms are public gives an insurance-specific range, so any figure quoted for an insurance archive is a negotiation, not a market rate.

General ranges give a frame. micro1 publishes tiers of $100,000 to $500,000 for qualified partnerships, $500,000 to $3 million for large-scale or ongoing datasets, and $3 million or more for highly unique operational data. Mercor's published industry ranges run from $20,000 to $1.5 million, according to ddiy.co's review of buyer sites in October 2026.

Volume, years covered and the share of free-text reasoning that survives de-identification decide where an archive lands. Our guide to [what your data is worth to AI companies](https://sellmydatatoai.net/guides/how-much-is-your-data-worth-to-ai) sets out the factors, and a [free data valuation](https://sellmydatatoai.net/data-valuation) applies them to your records.

## What rights issues do insurers and brokers need to clear?

The main rights issue for insurers and brokers is state insurance privacy law. The Gramm-Leach-Bliley Act's privacy provisions apply to insurers, and the US Government Accountability Office reported in 2002 that the Act requires state insurance authorities to enforce them through their own regulations.

### Financial and health information under the NAIC model

Many states based those regulations on the NAIC's Privacy of Consumer Financial and Health Information Regulation, Model 672. Section 12 bars a licensee from disclosing nonpublic personal financial information to a nonaffiliated third party unless notice and opt-out conditions are met, and Section 18 bars disclosing nonpublic personal health information unless an authorization is obtained.

Section 18 lists insurance functions that do not need authorization, such as claims handling, underwriting and fraud detection. Whether licensing data to an AI company fits any listed function is a question for your counsel under your state's version of the rule, and most sellers simply remove health information. States adopt the model with their own changes, so check each state where you write business.

### HIPAA, consumer reports and fraud files

Health insurers are covered entities under HIPAA, which HHS lists as including health insurance companies and HMOs. Model 672 says a licensee that complies with the HIPAA Privacy Rule is not subject to its health information article, and HIPAA in turn bars a covered entity from selling protected health information without authorization.

Underwriting files often hold consumer reports, such as credit-based reports and claims history reports. Under 15 U.S.C. section 1681b(f), a person shall not use or obtain a consumer report for any purpose unless it is a purpose the FCRA permits, so leave those reports out.

Daniel Goldberg of Frankfurt Kurnit Klein and Selz advises sellers to exclude high-risk data entirely rather than rely on de-identification, and names health information among the categories to leave out. For most insurance archives, that means removing medical records, special investigations unit files and consumer reports before [de-identification](https://sellmydatatoai.net/guides/de-identification-for-ai-training-data) of the rest.

### Broker and carrier contracts

Brokers and agents hold client files under producer agreements with carriers and engagement terms with clients. Read both before you treat a placement file as yours to license. Our guide on [whether you can legally sell company data](https://sellmydatatoai.net/guides/can-you-legally-sell-company-data-for-ai) covers the wider ownership test.

> **Rule of thumb** If a record would still identify a policyholder, claimant or witness once names are removed, or if it contains a medical record or consumer report, leave it out. Procedures, forms and de-identified reasoning carry far less risk and match what buyers' published briefs describe.

## If you hold UK or EU data

UK claims and underwriting files hold health information, which the ICO lists as special category data under UK GDPR Article 9, and fraud files hold criminal offense data with its own rules. Schedule 1, paragraph 20 of the [Data Protection Act 2018](https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/20) allows processing for insurance purposes such as underwriting and claims, and licensing to an AI company is not one of them.

Reuse for a new purpose is also tested under UK GDPR Article 8A, fully in force from February 5, 2026, which weighs the link between the purposes, the context of collection and the possible consequences for policyholders.

## How do you sell insurance data through Sell My Data To AI?

You sell insurance data through Sell My Data To AI by starting with a consultation, not a data transfer. We do not take custody of your raw data. Buyers see redacted samples under a mutual NDA, and full data moves only after you sign a license directly with the buyer.

Before any buyer sees a sample, your records pass our eight-point vetting standard, covering authority to sign, ownership, contract restrictions, privacy notices, third-party content, de-identification, sample quality and [manifest](https://sellmydatatoai.net/guides/how-to-build-a-data-manifest) accuracy. You approve every buyer, every sample and every license term. [Book a consultation](https://sellmydatatoai.net/book-a-consultation?side=seller) to find out whether your files are in demand.

## Frequently asked questions

### Can an insurer sell claims data to AI companies?

An insurer can license claims data only where it holds the right to do so and personal information is excluded or properly de-identified. State rules based on NAIC Model 672 bar disclosing nonpublic personal health information without authorization, and health insurers face HIPAA's sale limits. Take independent legal advice under your state's rules before licensing any claims files.

### Do brokers own their client files?

Brokers and agents hold client files under producer agreements with carriers and engagement terms with clients, and those contracts decide what reuse is allowed. Procedure manuals and templates your own staff wrote are a safer start. Under 17 U.S.C. section 201(b), work employees prepare within the scope of their employment is a work made for hire owned by the employer.

### Is there a published price for insurance data?

No buyer whose terms are public publishes an insurance-specific price. micro1's general tiers start at $100,000 to $500,000 for qualified partnerships, and Mercor's industry ranges run from $20,000 to $1.5 million according to ddiy.co. An archive's value depends on volume, years covered and how much reasoning survives de-identification.

### Will policyholders find out their data was licensed?

Plan as if policyholders will find out. The privacy notice in force when you collected their data governs what you may do with it, and the FTC has warned that quietly adopting more permissive practices, such as AI training, may be unfair or deceptive. Our guide to [telling staff and clients](https://sellmydatatoai.net/guides/telling-staff-and-clients-about-a-data-sale) covers how to handle it.

## Sources

- [Financial privacy: status of state actions on Gramm-Leach-Bliley Act's privacy provisions (GAO-02-361)](https://www.gao.gov/products/gao-02-361), US Government Accountability Office, accessed November 2026
- [Privacy of Consumer Financial and Health Information Regulation (Model 672)](https://content.naic.org/sites/default/files/model-law-672.pdf), National Association of Insurance Commissioners, accessed November 2026
- [Covered entities and business associates](https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html), US Department of Health and Human Services, accessed November 2026
- [15 U.S. Code section 1681b: permissible purposes of consumer reports](https://www.law.cornell.edu/uscode/text/15/1681b), Legal Information Institute, Cornell Law School, accessed November 2026
- [17 U.S. Code section 201: ownership of copyright](https://www.law.cornell.edu/uscode/text/17/201), Legal Information Institute, Cornell Law School, accessed November 2026
- [AI (and other) companies: quietly changing your terms of service could be unfair or deceptive](https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive), Federal Trade Commission, accessed November 2026
- [Monetize your company's operational data](https://www.micro1.ai/data), micro1, accessed November 2026
- [micro1 announces commitment to spend $1B on enterprise data acquisition over the next 12 months](https://www.micro1.ai/blog/micro1-commits-1b-to-enterprise-data-acquisition), micro1, accessed November 2026
- [How to sell company data to AI companies (2026 guide)](https://ddiy.co/sell-company-data-to-ai/), ddiy.co, accessed November 2026
- [Selling company data for AI training: what to know before you say yes](https://technologylaw.fkks.com/post/102o455/selling-company-data-for-ai-training-what-to-know-before-you-say-yes), Frankfurt Kurnit Klein and Selz (Daniel Goldberg), accessed November 2026
- [What is special category data?](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/special-category-data/what-is-special-category-data/), Information Commissioner's Office, accessed November 2026
- [Data Protection Act 2018, Schedule 1, paragraph 20: insurance](https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/20), legislation.gov.uk, accessed November 2026
- [UK GDPR Article 8A: purpose limitation, further processing](https://www.legislation.gov.uk/eur/2016/679/article/8A), legislation.gov.uk, accessed November 2026

---

Book a free consultation: https://sellmydatatoai.net/book-a-consultation