Integration

Fits the systems you already run.

intactly reads from your claims system and writes back obligations, findings and reports. It does not replace a policy administration system, it does not become the system of record, and it does not require you to migrate anything.

The shape of it

Three flows. Claims and documents in, obligations and findings out, reports on demand.

The integration surface is deliberately small because the alternative - a platform that wants to own the claim - is a two-year programme nobody approves. intactly needs enough of the claim to evaluate it and enough of the file to read it. It does not need your policy administration system to change.

FlowDirectionTypical transportCadence
Claim eventsYour system → intactlyWebhook, message bus, or batch fileNear real time, or nightly
DocumentsYour system → intactlyPre-signed object storage, or content APIOn attach
Policy & productYour system → intactlyAPI on demand, or reference extractOn claim open, then on change
Obligations & findingsintactly → your systemWebhook, or work queue APIOn change
Compliance reportsintactly → youAPI, or scheduled deliveryOn demand, or on close

Reference architecture

Everything inside the boundary runs in Australian regions. No claim content crosses a border, including at inference time.

SOURCE SYSTEMS Claims systemGuidewire, FINEOS, Figtree Policy adminPDS, schedule, endorsements Document storeSharePoint, Objective, OpenText Contact centreGenesys, Service Cloud Scheme & externalSIRA, icare, BOM, ICA CAT ap-southeast-2 — no claim content leaves this boundary Ingest Webhook / bus Batch file Event mapping Idempotency Canonical model claim event document product party Clockworkobligation engine Casefile + Signaldocuments, integrity CoveragePDS & schedule Ledgerreports, provenance Egress Webhooks Work queue API Report API Warehouse sync Audit log append only rule fingerprint every decision CONSUMERS Claimswork queue Risk &reporting

Integration patterns

Pick by what your claims system can already do, not by what is technically ideal.

1. Event streaming (preferred)

Your claims system emits an event when something happens on a claim. intactly evaluates and pushes changed obligations back. Lowest latency, and the only pattern where the queue is genuinely live.

Guidewire messagingKafka / Event Hubs Azure Service BusAWS EventBridgeWebhook

2. Scheduled extract

A nightly or hourly extract of claims and events. Perfectly workable: obligation clocks run in days, not seconds, so a nightly cadence loses very little. This is the right first step for a legacy or mainframe claims system, and it is how most pilots start.

SFTP file dropS3 / BlobODBC extractFivetran / ADF

3. API pull

intactly polls your claims API on a schedule. Useful where you cannot emit events and cannot schedule an extract, but it puts read load on your system and is the least preferred of the three.

4. Embedded view

Rather than replicating the work queue in your claims UI, embed the intactly claim view as an iframe or a Guidewire page fragment, authenticated by the same SSO session. Fastest route to a handler actually using it, because it does not require a change to your claims UI release cycle.

Deployment models

ModelWhere it runsSuitsTrade-off
Managed intactly-operated, ap-southeast-2 Most insurers and scheme agents Fastest to value. You take a material service provider under CPS 230.
Customer tenancy Your AWS or Azure account, Australian region Where data must stay under your own account You own the infrastructure and its patching; we deploy into it.
Engine-only Your infrastructure, no network egress Scheme agents with the strictest data rules The obligation and coverage engines are dependency-free and run anywhere. Document intelligence needs more.

The engine-only option exists because of a deliberate build decision: the obligation, coverage and integrity engines have no third-party dependencies and make no network calls. They can be reviewed line by line and run inside an air-gapped environment. That was a constraint chosen for APRA's third-party AI risk expectations, and it turns out to be an unusually good answer to a procurement question.

Implementation phases

01

Read-only extract, one portfolio

A claim and event extract for a single line of business. No writes anywhere, no change to your claims system. Produces the first breach-ranked queue, typically within two weeks of receiving data.

02

Rule verification

Your legal or compliance function verifies each obligation rule against the primary instrument. Every rule ships unverified and is labelled as such until this is done. This is a gating step, not an optional one.

03

Shadow run

The engine runs against 90 days of closed claims. Projected breaches are compared to known outcomes, thresholds are tuned, and integrity typologies are enabled or disabled against your own book.

04

Live queue

Obligations flow to handlers, in your claims UI or in the intactly view. This is the point at which the compliance position starts improving, because it is the point at which someone works it.

05

Documents and coverage

Document ingestion, integrity examination and coverage assessment against the PDS. Sequenced last because it is the heaviest lift and depends on document access that usually needs its own approval.

06

Reporting and disclosure

Compliance reports, the CPS 230 material service provider pack, and the APP 1 automated decision disclosure generated from what the system actually does.

What it costs you

Honest estimates of your effort, not ours. These are the numbers to take to a steering committee.

TaskYour teamTypical effort
Claim & event extractClaims IT / data3–10 days, depending on whether an extract already exists
Event mapping workshopClaims technical + IT1–2 days. Mapping your statuses to the canonical event vocabulary is the real work of integration.
SSO & provisioningIdentity1–2 days (SAML or OIDC, plus SCIM)
Rule verificationLegal / complianceThe gating item. Budget properly - it is a legal review, not a config task.
Document accessRecords / IT securityHighly variable. Often the longest approval, so start it early.
Security reviewRisk / CISOPack is pre-built. See Security & compliance.