# Growthmill

> Growthmill is a bespoke insurance software practice. We build custom platforms for carriers, MGAs and brokers, assembled on a battle-tested module library of 18+ production modules. Founded by CTOs, headquartered in Plano, TX, USA. SOC 2 Type II.

We specialize in P&C specialty (surplus lines, E&S, programs), MGA/MGU/wholesaler distribution, carrier operations (quote-bind-issue-endorse), and retail/wholesale brokerages. Most engagements ship in quarters, not fiscal years, because 60–80% of a platform is pre-built before week one.

## Core pages

- [Homepage](https://growthmill.com/): Overview of the practice, module library, deployment targets, security posture, engagement model, and Envoy (the off-the-shelf product variant).
- [Module library](https://growthmill.com/modules): Detailed view of all 18 production modules across five groups - Platform, Quote & Bind, Carriers, Output, Portals.
- [Company](https://growthmill.com/company): Approach, why insurance, focus areas, and core values that guide engagements.

## What we build

- **Platform**: Identity (OKTA / SAML / OIDC), RBAC, multi-tenant organization model, audit log, observability hooks.
- **Quote & Bind**: Rating engines (P&C specialty, ACORD-aware), comparative quoting, surplus-lines tax + stamping office calculations, bind workflows.
- **Carriers**: 40+ carrier API integrations, ACORD form intake, email/PDF parsing, scrape-as-fallback, bordereaux pipelines.
- **Output**: Branded proposal generation (PDF / PPTX / DOCX), e-sign, tracked email delivery.
- **Portals**: White-labeled experiences for insureds, retail agents and agency partners.

## Engagement model

1. **SCOPE** - Two-week scoping sprint embedded with underwriting, ops, IT. Output: module map, build plan, risk register, fixed quote.
2. **ASSEMBLE** - Compose the platform from pre-built modules in your environment. Auth, hierarchy, rating, carriers, portals.
3. **EXTEND** - Build the bespoke 20% - custom rating, niche workflows, your carrier integrations. Source handed off.
4. **OPERATE** - Small embedded team after launch. SLOs, roadmap, ongoing carrier additions.

## Deployment

AWS (EKS / ECS, Aurora, S3, KMS), Microsoft Azure (AKS, Postgres Flex, Key Vault), Google Cloud (GKE, Cloud SQL), Vercel, or bare-metal / on-prem Kubernetes with air-gapped builds. Region-pinned data residency, customer-managed KMS.

## Security & compliance

- SOC 2 Type II (Security, Availability, Confidentiality TSC)
- 12-month observation window, annual refresh, bridge letters between cycles
- TLS 1.2+ (1.3 preferred) in transit, AES-256 at rest, per-tenant keys, envelope encryption
- SSO via SAML / OIDC, SCIM provisioning, RBAC, MFA, audit-log streaming to SIEM
- Trust portal: https://trust.inc/org_68e7bb38c6d939075d35ed8f

## Related products

- [Envoy](https://envoy.insure) - The same module library, pre-assembled and ready to deploy as a multi-tenant SaaS for teams whose roadmap fits the standard shape.

## Contact

Growthmill Inc, Plano, TX, USA. Use the "Talk scope" CTA at https://growthmill.com to start a two-week scoping sprint.