Update Quote Request

Id of the Quote Request to update (see Create Quote Request)

The SUBMIT action should be used for saving the quote request values and submitting it for quoting. This action will only update optionalData and limits if the quote request has a status of INCOMPLETE.

The RESUBMIT action may be used to modify values and re-quote. However, the previous quote data will be overwritten. This action is only available to referred quotes with a status of SUBMITTED up until an underwriter begins work rating the submission. A quote that has been referred cannot be resubmitted once an underwriter picks it up for review.

Coverage start date

Format must be YYYY-MM-DD

To request more than one coverage option, add one entry for each option here. Do not create a new client and quote request for each option.

Must be an array with a length of between 1 and 3 values composed of the following keys:

Must be an integer representing the limit in cents.

Must be an integer representing the deductible in cents.

Despite its name, this field is required for a submission.

Must be a JSON array composed of one object for each of the following keys with their respective values and types:

Must be one of the 50 states, fully spelled out, or "District of Columbia".

Answer must be a nature of business name as a string (see Smart Tech E+O Nature of Business), or a 6-digit NAICS code formatted as an integer string, i.e., "541511"

Projected gross annual revenue (next 12 months)

In dollars, formatted as an integer string, i.e. "1000000000"

Estimated amount of unique personally identifiable records stored, processed or transmitted maintained by the Applicant (including records stored by third-party providers)

Answer must be in the list of "min", "veryLow", "low", "medium", "high", "veryHigh", "max", "uncertain".

These possible answers translate to:

"min" -> 0-250,000 records

"veryLow" -> 250,001-500,000 records

"low" -> 500,001-1,000,000 records

"medium" -> 1,000,001-2,500,000 records

"high" -> 2,500,001-5,000,000 records

"veryHigh" -> 5,000,001-10,000,000 records

"max" -> 10,000,001+ records

"uncertain" -> Use if you do not have an answer to this question

Boolean value to signify if submission is for a non-bindable indication quote.

true - this submission is an indication

false - this submission is a request for a bindable quote

A message to the underwriter about this submission, up to 10,000 characters. A non-blank message also sends Corvus an email notification about the update.

The date by which you need the quote. Format must be YYYY-MM-DD.

If omitted, the existing due date is kept.

Updates the client's primary website, up to 255 characters. Use the same formats as createClient (see Create Client).

These values are not required in the request, but may be necessary to quote or bind depending on client details. Responding to them can help prevent a subjectivity and expedite the submission process.

8. Does the Applicant collect, capture, purchase, receive through trade, orotherwise obtain biometric data (biometric data is data related to body measurements andcalculations related to human characteristics and includes, but is not limited to,fingerprints, iris or retina scans, voiceprints, sleep/health/exercise data, DNA or biologicalmarkers)?

9. Description of technology products/services offered to others for a fee or other compensation or consideration.

10. Provide a breakout of the percentage of revenue derived from the products/services listed in the TechEO Nature of Business section. (List ALL that apply)

RevenuePercentageInput is an object with the following shape:

{ natureOfBusiness: String, basisPoints: Int }

Product/service description from the Nature of Business list - e.g. 'IT Consulting'

Basis points of revenue for the nature of business - e.g. 1000 basis points = 10%

11. List the Applicant's 3 largest contracts including client name and annual value (USD) of the contract

** Not all ContractSurveyInput fields need to be submitted. If details of only one or two of the largest contracts are known, or if the applicant has fewer than three contracts, details of the known/existing contracts may be submitted while omitting the fields that correspond to the unknown or non-existant contract(s).

ContractSurveyInput is an object with the following shape:

{ client1Name: String, client1Value: Int, client2Name: String, client2Value: Int, client3Name: String, client3Value: Int }

Name of the client for the applicant's largest contract

Annual Value in USD of the applicant's largest contract

Name of the client for the applicant's 2nd largest contract

Annual Value in USD of the applicant's 2nd largest contract

Name of the client for the applicant's 3rd largest contract

Annual Value in USD of the applicant's 3rd largest contract

12. Does the Applicant always utilize written contracts with customers?

13. Does legal counsel approve all changes to standard contracts?

14. Does the Applicant require customer acceptance or sign-off within agreements or contracts?

15. Does the Applicant require Limitation of Liability within agreements or contracts?

16. Does the Applicant include a waiver of implied warranty or any other warranty, except explicit warranties, to the extent allowable by law?

17. Does the Applicant include exclusion of consequential damages in their contracts inuring to their benefit?

18a. Do you have email filtering in place?

18b. Do you use an advanced email security solution that includes features such as URL and attachment sandboxing. (Secure Email Gateway). If so, provide the name of the vendor.

19a. Do you have a backup solution?

19b. If so, how frequently do you back up systems and data?

BackupFrequency is an enum with the following values:

CONTINUOUS_BACKUPS, DAILY, LESS_THAN_MONTHLY, MONTHLY, NEVER, UNANSWERED, UNCERTAIN, WEEKLY

19c. Which of the following are in place for your backup solution(s)? (Select ALL that apply))

BackupSolutionQuestionInput is an object with the following Boolean fields:

Backup servers and user accounts use unique credentials

Backup servers are not joined to a Windows domain

Backup servers are segmented from the rest of the network

Cloud based backups

Backup solution with immutable backups

MFA required for access to backups

Multiple copies of backups stored in 2 or more geographical locations

Copy of backups are kept offline or air-gapped

20a. MFA enforced to secure all remote access to your network.

20b. MFA enforced to secure internal use of privileged accounts (administrator accounts, service accounts, etc.)

20c. MFA enforced for email access via webmail portal (i.e. Gmail), mailbox applications (i.e. Outlook Application) and non-corporate devices for all employees

20d. MFA enforced to secure access to all critical applications

21. How are privileged accounts secured and managed? (Select ALL that apply)

PrivilegedAccountsInput is an object with the following Boolean fields:

Administrative users use different accounts for administrative use and non-administrative use (e.g. day to day activities such as browsing and email)

Standard users do not have administrative rights to their workstations

Local administrator accounts are unique and complex on all systems

A password management vault is used to manage privileged accounts

22. What Endpoint Security Technology do you have in place? (Select ALL that apply and list the product and vendor)

EndpointSecurityVendorInput is an object with the following String fields:

Next Gen Antivirus

Endpoint Detection & Response (EDR)

Managed Detection & Response (MDR)

Extended Detection & Response (XDR)

23. What security controls are in place to protect against unauthorized access to sensitive and confidential data?

SensitiveDataAccessProtectionQuestionInput is an object with the following Boolean fields:

Least privilege access using role-based assignments

Network segmentation of servers containing sensitive data

Logging and monitoring

MFA required for all user access to systems/applications with sensitive data

Encryption at Rest (File level)

Encryption of Data in-transit

24. Do you have a Business Continuity Plan (BCP) or Disaster Recovery Plan (DRP) in place?

24a. If yes, has it been tested in the last 12 months?

25. Do you have an Intrusion Detection System (IDS) or Intrusion Prevention System (IPS) in place?

26. Do you conduct penetration testing of your network at least annually?

27. Do you conduct employee security training or phishing training, for all employees, at least annually?

28. Prior to executing an electronic payment, do you verify the validity of the funds transfer request or payment change request, with the requestor, via a separate means of communication prior to transferring funds or making payment changes?

29. If the Applicant uses multimedia material provided by others, does the Applicant always obtain the necessary rights, licenses, releases, and consents prior to publishing?

30. If the Applicant accepts payment cards in exchange for goods or services rendered, is the Applicant or their outsourced payment processor PCI compliant?

31. In the past three years, have you experienced any technology services or professional services errors or omissions incidents/claims, cyber security incidents, data privacy incidents or any multimedia liability claims?

32. Do you or any other person or organization proposed for this insurance have knowledge of any actual or alleged: technology services errors or omissions, security breach, privacy breach, privacy-related event or incident, breach of privacy, or multimedia incident that may reasonably be expected to give rise to a claim or to costs being incurred?

33. In the past three years, have you or any other organization proposed for this insurance sustained any unscheduled network outage or interruption lasting longer than 6 hours?

Quote request id you can use in future requests