SmartQuotes
DemoFor platformsFor partnersFor platform buyers
Architecture

Architecture overview

A high-level view of how the SmartQuotes platform is shaped. This page is intentionally non-sensitive: it does not expose internal hostnames, topology details, credentials, or provider-specific configuration.

Platform shape

BrowserCustomer / partnerWeb tierPublic pages + formsAPI serviceValidation + logicData storeDurable, encryptedAudit logAppend-onlyTLSTLS
Figure 1. Requests travel over encrypted TLS from the browser to a public web tier, then to a separate API service that reads and writes a durable, encrypted data store and records events to an append-only audit log. Diagram is illustrative and non-sensitive.

Principles reflected above

  • Encrypted transport (TLS/HTTPS) for web and API traffic.
  • Public customer experiences are separated from administrative and operational surfaces.
  • Application data is held in durable, encrypted storage.
  • Material events are written to an append-only audit log to support accountability and review.
  • Sensitive partner appetite logic and internal configuration are not exposed to public experiences.

For enterprise review

Highlights for review

  • Public architecture is intentionally non-sensitive
  • No hostnames, secrets, tokens, or private topology
  • Explains application flow at the executive level
  • Deeper technical details available under appropriate review
Request Architecture ReviewView Enterprise Readiness
SmartQuotes is building its security and operational practices in alignment with SOC 2 Trust Services Criteria. SmartQuotes has not completed a SOC 2 Type I or Type II audit, and nothing on these pages is a certification, attestation, or audit report. Status labels reflect current readiness, not completed controls.