Yes. Typically there’s a business associate HIPAA agreement that outlines use. SOC 2’s start at $35,000 with a month of an engineering time and 99.9% of insurance agencies don’t have one. Getting it done is the long term plan.