Hosting in Germany
Your data is hosted in Germany, in the EU. Backup hosting in further regions is possible for additional resilience.
Integration & security
Aestimo complements your existing systems rather than replacing them. We clarify data flows, interfaces and operational responsibilities with business and IT teams before the first case goes live.
Security & compliance
Your data is hosted in Germany, in the EU. Backup hosting in further regions is possible for additional resilience.
Data is encrypted in transit and at rest.
Information security in line with ISO 27001 requirements.
A clear data processing agreement and a binding service level agreement.
Compliant with the Digital Operational Resilience Act – and supports your obligations on ICT third-party risk.
Compliant with the requirements of the EU Cyber Resilience Act.
The platform
Your insurance environment
Aestimo
Model boundary
Cloud or on-premise models – interchangeable per use case.
Interfaces
Create cases, assign owners, read and write metadata and documents.
Notify your systems of Aestimo events automatically.
Optional: cases are created exclusively from your core system.
Optional: users are created and removed exclusively through your IdP.
Storage in Zoho WorkDrive or delivery by email per category.
AI models remain an interchangeable component – cloud or on-premise.
Access & traceability
Both products use role-based access – each with its own role model, built for what it does.
Every account has exactly one role and is assigned to groups and claim categories. Access is scoped to the cases a team is responsible for. Events such as links sent, calls accepted and status changes are recorded in the case log.
| Role | Permissions |
|---|---|
| User | Create and edit cases, send links, answer calls, comment, change status, download. |
| Supervisor | As user, plus statistics and reading and deleting cases in their groups. |
| Admin | As user, plus user management, statistics and configuration. |
| API (technical) | No interface. Create cases, manage documents and metadata per group, register webhooks. |
Its own role model, specialised per module: the roles available depend on which Workbench modules you use. During setup, we map them to your organisation.
Data protection
GDPR consent before capture can be made mandatory, with your own text.
No background tracking. Location sharing required or optional.
Deletion periods from 1 to 60 days per claim category.
Every customer receives a secure link tied to their own case.
You decide which cases run fully automated and which your experts review.
Governance
The question is no longer whether to use AI – it’s how: safely, repeatably, in line with the AI Act and under control.
From straight-through processing to expert approval: you decide where people review, correct and decide.
Prompts, models and knowledge sources are managed as controlled parts of the process.
Permissions control who sees which insurance data.
Interactions, changes, outputs and review steps are recorded.
Operations & documentation
From conversation to pilot
Agree on the process, starting point and desired outcome.
Align data, roles and handovers with business and IT.
Compare follow-up questions, time to a workable case and handover quality.
Book a demo
A specific use case is the best starting point.