← All resources

Strategy · 9 min read

How to Evaluate an AI Vendor as an Independent Insurance Agency

Evaluating AI vendors as an insurance agency: the seven questions that expose demoware, the red flags in security claims, and a scoring shortcut that works.

By Josh Kay, Founder · Published July 12, 2026

Every agency owner's inbox now contains at least three AI pitches a week, and they all demo beautifully. That's the problem: the demo is the one part of every AI product that always works. What separates a vendor who'll still be saving you hours in month eight from one whose tool quietly stops being used in week three is never visible in the demo.

Full disclosure before we start: we're a vendor. We sell done-for-you AI automation to agencies, which means this article describes the scrutiny we believe we should be held to. Use it on us. Use it on everyone.

Here are the seven questions that expose the difference, the red flags each one surfaces, and a scoring shortcut at the end.

The seven questions

1. "Show me the AMS integration writing back, live, in my system's sandbox."

The single most predictive question. Reading data out of Applied Epic, HawkSoft, or EZLynx is table stakes; writing activity back (every touch logged, every response recorded) is where most tools quietly fail, and a tool that doesn't write back creates a shadow system your team must reconcile by hand. Demoware answer: "the integration is on our roadmap" or a demo against their own sample data. Real answer: a live write-back against a sandbox of your AMS, or a named reference agency on your exact AMS version you can call. (The fields involved are in our AMS integration guide.)

2. "What happens in the 60 seconds after a client texts STOP?"

The compliance question that separates engineering from marketing. The right answer is specific: one suppression list, consulted by every sequence before every send, updated in real time, mastered back to the AMS. A vendor who answers with generalities about "taking compliance seriously" hasn't built it. The full set of six data-handling questions is in our PII compliance checklist; this one is the fastest tell.

3. "Does any model train on my clients' data, and can I have that in writing?"

There are only two acceptable answers: "no, and here's the contract clause," or "here's exactly what's used, retained, and for how long." Hesitation, or an answer that requires a follow-up email to their engineering team, means they don't know their own data flows, which is worse than a bad answer.

4. "What does the first 30 days look like, hour by hour, for my team?"

Demoware vendors sell outcomes; real operators sell an implementation plan. You're listening for specifics: who maps the data, who writes the templates, what your CSRs do differently in week two, what realistic timeline they commit to (for reference, we quote 2-3 weeks to live and consider longer estimates honest and shorter ones suspicious). The red flag is "it just works out of the box." Nothing that touches an AMS just works out of the box.

5. "Show me a customer who left, and tell me why."

Every vendor has churned customers. One who claims otherwise is lying or too new to trust. What you learn from the honest answer: where the product's real edges are, which agency profiles it doesn't fit, and how the vendor behaves when things don't work. Follow-up worth asking: "what refund did they get?" (Our answer, for the record: the audit is $1,500 flat and we refund it if the roadmap isn't actionable.)

6. "What security attestation do you have, who audited it, and what exceptions did they find?"

If the vendor claims SOC 2, three checks take ten minutes: the report should be less than 12-15 months old, the auditing CPA firm should be verifiable (the AICPA maintains a public directory), and the vendor should discuss audit exceptions openly, because a clean-except-nothing report from an unknown auditor is itself a documented red flag; there's been at least one public scandal over rubber-stamped SOC 2 reports. Smaller vendors may not have SOC 2 yet, and that can be acceptable for an agency your size IF they answer the six engineering questions in the PII checklist in specifics: encryption, minimization, suppression, retention, audit trail, access control.

7. "What happens to my data and my automations if you disappear?"

Vendor mortality is real in the AI wave. You want three things: a data-export commitment in the contract (your book, your touch history, machine-readable, on demand), reasonable notice terms, and no proprietary lock-in on assets you paid to build (your templates, your sequences, your integration mappings). A vendor who bristles at the question is telling you the answer.

Red flags that end the conversation

Some signals justify walking away regardless of how the seven questions go:

  1. Guaranteed outcomes with no baseline. "We'll raise your retention 20%" from someone who hasn't seen your book is astrology. A real operator measures your baseline first, then commits to a range. (We hold ourselves to the same bar: the 15-20% retention figure we use is a target with the mechanism attached, not a client average — and the 391% response-time figure is Velocify's, cited as theirs.)
  2. Pressure pricing. "This price expires Friday" is a tactic for products that don't survive deliberation.
  3. No insurance-native vocabulary. If the sales engineer doesn't know what an X-date, a book roll, or an ACORD form is, you're buying a generic SMB tool with an insurance landing page, and every workflow assumption inside it will be slightly wrong.
  4. The demo can't touch real data structures. A vendor unwilling to demo against realistic policy data (even anonymized) is hiding integration weakness.
  5. "AI does everything, no humans needed." In insurance, coverage advice is a licensed human's job, legally. A vendor who doesn't know where that line sits will walk your agency across it.

The reference call: five minutes that beat every demo

If you do only one piece of diligence, make it a phone call to a reference agency, and run it right. Vendors hand-pick references, so the information isn't in whether the reference is happy; it's in the specifics you extract. Five questions, five minutes:

  1. "What broke in the first month?" Every implementation breaks something. A reference who names the breakage and how the vendor handled it is giving you the real service-quality signal. A reference who says "nothing, it was perfect" was either coached or wasn't paying attention.
  2. "Which AMS and version are you on?" If it isn't yours, discount everything else they say about the integration.
  3. "What do your CSRs say about it now?" Owner enthusiasm is cheap; front-line adoption is the whole ballgame. Tools the CSRs route around are already dead.
  4. "What did you stop using it for?" The most revealing question on the list. Almost every account trims scope after launch, and where they trimmed tells you where the product's promises exceeded its engineering.
  5. "Knowing what you know, what would you negotiate differently?" Surfaces the contract terms and pricing edges the vendor's proposal won't.

Take notes, then compare against what the vendor's sales engineer told you. Small divergences are normal. A reference who describes a different product than the one you were pitched is your answer.

The scoring shortcut

If you'd rather not run a procurement process for a $200-2,500/month decision, this compressed version catches most of the signal:

CheckPass looks likeWeight
Live AMS write-backDemonstrated in sandbox, or named reference on your AMS3x
STOP-handling answerSpecific, immediate, cross-sequence2x
Training-data clauseIn writing, no hedging2x
30-day planNamed owners, realistic timeline1x
Churned-customer answerHonest, specific, with refund terms1x

Score it out of nine weighted points; below six, keep shopping. It's crude, but it beats the alternative most agencies actually use, which is buying whichever demo was most recent.

Evaluate us with it

The uncomfortable-but-honest close: run this exact list on every vendor who pitches you, including us. Ask us for the live write-back, the STOP walkthrough, the training clause, the 30-day plan, and the churned customer. If you want the side-by-side context first, our comparison pages hold up the same standard against the named alternatives, and the audit exists precisely so the engagement starts with your baseline instead of our promises.

The best AI vendor for your agency is the one still answering these questions specifically after the contract is signed. Choose the one who never stopped.

Keep reading

Free guide

5 AI Automations Every Insurance Agent Should Set Up This Week

The five automations we install in the first two weeks of a Build & Launch engagement. Set them up yourself, or use this as the scoping doc for a conversation with us.

Get my free guide →

Ready to talk instead? See audit pricing and packages.