Trust Onsurity with your team, your data and your money
Everything a finance, HR or security team needs to sign off with confidence: how we are regulated, how we protect data, how we secure it, and how we stay accountable for every rupee and every claim.
Companies trust Onsurity
Members covered
Claims paid out
Cashless network hospitals
Four reasons buyers trust us
Regulated, compliant, secure and accountable — the four questions every procurement, finance and InfoSec review asks, answered up front.
Regulated
An IRDAI-registered corporate agent (CA0836), operating through Atmanirbhar Suraksha Insurance Private Limited (ASIPL).
Compliant
Built to the Digital Personal Data Protection (DPDP) Act, 2023, with your data stored in India.
Secure
Data encrypted in transit and at rest, with least-privilege access controls and continuous monitoring.
Accountable
₹600 Cr+ paid across 100,000+ claims, with a transparent, time-bound grievance process behind every one.
An IRDAI-registered corporate agent
Onsurity distributes insurance as a corporate agent registered with the Insurance Regulatory and Development Authority of India, under registration number CA0836 (valid till 27 December 2028), operating through Atmanirbhar Suraksha Insurance Private Limited (ASIPL). Here is what that licence means for you.
A regulated intermediary
Onsurity distributes insurance as an IRDAI-registered corporate agent. That means our conduct, disclosures and sales practices are governed by the Insurance Regulatory and Development Authority of India — not left to self-regulation.
Insurers you can verify
Every policy is underwritten by IRDAI-licensed insurance companies. We are the intermediary and administrator; the insurer carries the risk and the regulatory backing that comes with it.
A defined accountability chain
A registered corporate agent must maintain grievance mechanisms, nodal officers and defined turnaround times. If something goes wrong, there is a documented path — right up to the IRDAI Ombudsman.
Data protection & the DPDP Act, with your data in India
Health data is among the most sensitive data a company holds on its people. We treat it that way — built around India’s Digital Personal Data Protection (DPDP) Act, 2023, and hosted within the country.
Last reviewed: 09-Jul-2026
Encryption & security practices
Straight talk, no badge theatre: below are the security practices we actually follow. Where we describe something, we mean it as a practice we operate — not a certification we are claiming.
Encryption in transit
Traffic between your browser or app and Onsurity is protected with TLS, so data in motion is not exposed on the wire.
Encryption at rest
Sensitive data is encrypted where it is stored, so a copy of the raw storage is not readable on its own.
Least-privilege access
Access to member and health data is restricted on a need-to-know basis, with role-based controls and authentication for our internal teams.
Monitoring & logging
Access and system activity are logged and monitored so unusual behaviour can be detected and investigated.
Secure development
Changes go through code review and testing before release, and we act on responsibly disclosed security issues.
Data minimisation
We avoid collecting or displaying more personal and health information than a given task genuinely needs.
Running a security or vendor review? We are happy to complete DPDP and InfoSec questionnaires — write to us and we will route it to the right team.
Privacy & your rights
Under the DPDP Act, individuals — Data Principals — have clear rights over their personal data. Here is what you can ask of us, and how our Privacy Policy puts them into practice.
Right to access
Ask what personal data of yours we hold and how it has been processed.
Right to correction
Have inaccurate or incomplete personal data corrected or updated.
Right to erasure
Request deletion of your personal data where it is no longer required and the law permits.
Right to grievance redressal
Raise a concern about how your data is handled and have it addressed within a defined timeline.
Right to nominate
Nominate another individual to exercise your rights in the event of death or incapacity.
Right to withdraw consent
Withdraw a consent you have given, as easily as you gave it, subject to legal and policy obligations.
Grievance redressal & the IRDAI Ombudsman
Every regulated insurance relationship in India comes with a defined escalation path — right up to an independent Ombudsman. Here is exactly how to use it. Full detail lives on our Grievance Redressal page.
Step 1 — Reach out
Start with our support team. Most concerns are resolved here, and we acknowledge every complaint within 24 hours.
- Email: escalations@onsurity.com
Step 2 — Grievance Officer
Not satisfied? Escalate to our Grievance Redressal Officer. We aim to redress escalated complaints within 45 days of receipt.
- Email: grievance@onsurity.com
- Address: Smartworks, Vaishnavi Tech Park, South Tower, Sy No-16/1, Bellandur Gate, Sarjapur Main Road, Ambalipura, Bengaluru, Karnataka 560103
Step 3 — IRDAI & Ombudsman
If your issue is still unresolved, you may take it to the insurance regulator or the statutory Insurance Ombudsman — an independent forum, free to approach.
- IRDAI Grievance Call Centre: 155255 or 1800 4254 732 (toll-free)
- IRDAI email: complaints@irdai.gov.in
- IRDAI portal: bimabharosa.irdai.gov.in
- Insurance Ombudsman: cioins.co.in
Onsurity acts as the group administrator and intermediary. The final authority for the approval, validation and payment of any insurance claim rests with the IRDAI-licensed insurer.
Accountable for every claim
Trust is not a promise — it is a track record. Here is ours, and you can watch any single claim move in real time inside the Onsurity Super App.
Trust & compliance FAQ
Yes. Onsurity distributes insurance as an IRDAI-registered corporate agent (registration number CA0836), operating through Atmanirbhar Suraksha Insurance Private Limited (ASIPL). Every policy is underwritten by IRDAI-licensed insurers, and our conduct as an intermediary is governed by the Insurance Regulatory and Development Authority of India.
Member and company data is hosted on infrastructure located in India, so your team’s personal data stays within the country. We collect only what we need to administer your membership and claims, and retain it only as long as the law and your policy require.
Our data practices are built around India’s Digital Personal Data Protection (DPDP) Act, 2023 — lawful, purpose-limited processing; clear notice and consent; and honouring the rights the Act grants every Data Principal, including access, correction, erasure and grievance redressal.
We encrypt data in transit using TLS and encrypt sensitive data at rest. Access to member and health data is restricted on a least-privilege, need-to-know basis with role-based controls, and system activity is logged and monitored. We frame these as our security practices rather than any specific certification.
Start with escalations@onsurity.com; unresolved concerns escalate to our Grievance Redressal Officer at grievance@onsurity.com, which we aim to address within 45 days. If it is still unresolved, you can approach IRDAI (Grievance Call Centre 155255 / 1800 4254 732, or bimabharosa.irdai.gov.in) and the independent Insurance Ombudsman at cioins.co.in.
Onsurity has facilitated ₹600 Cr+ in claims across more than 100,000 claims for over 2 million members and 10,000+ companies. Claim status is visible in real time in the Onsurity Super App, and the final authority to approve and pay a claim rests with the IRDAI-licensed insurer.
Onsurity was founded in 2020 in Bengaluru by Yogesh Agarwal and Kulin Shah, on a monthly-membership model that makes comprehensive healthcare and insurance accessible to teams as small as two.
Yes. For DPDP, security-practice or vendor-assessment questionnaires as part of your procurement or InfoSec review, write to us and we will route your request to the right team.
Ready to sign off with confidence?
Bring your finance, HR and security questions — we will walk you through our compliance, data protection and claims track record before you commit to anything.
IRDAI corporate agent CA0836 · DPDP-aligned · data hosted in India · ₹600 Cr+ claims paid