HelloSafe

Compliance & licensing

Distribute travel insurance without carrying the licence

HelloSafe is an independent travel insurance marketplace. The licensed insurers underwrite and the regulatory documents, claims and complaints sit with them. You keep the client relationship and the commission.

The distribution model

Who does what, exactly

Three roles, three sets of responsibilities. The regulated activity never sits with you.

You: the partner

You refer and route: tracked links, widget, white-label or API. You follow the marketing rules and keep your client relationship.

  • Promote with the kit and your own content
  • Route travellers to the comparison or the checkout
  • No advice obligations, no regulatory documents

HelloSafe: the marketplace

HelloSafe is an independent travel insurance marketplace. We compare plans from licensed Canadian insurers and connect travellers to them. We never sell or underwrite a policy ourselves.

  • Plan comparison across licensed Canadian providers
  • Multilingual journey, with the insurer's documents shown in line
  • A clear path to the insurer for claims and complaints

Insurers: the risk carriers

Manulife, Allianz Global Assistance, TuGo, Blue Cross and other licensed Canadian insurers underwrite the policies. HelloSafe compares them independently, with no exclusive agreements.

  • Underwriting and policy risk
  • Authorized province by province, with 24/7 assistance networks
  • Disclosed rankings, disclosed commissions

Licensing by integration mode

Do you need a licence? No

Insurance in Canada is regulated province by province, and HelloSafe never sells a policy. Whatever the integration depth, you stay a referrer. The only thing that changes is how the journey is embedded.

Links & widget

You refer, nothing more

Tracked links and the comparison widget route to the HelloSafe journey. You never collect insurance data, so no registration is required on your side.

White-label

Our journey, your brand

Quote and checkout run on HelloSafe rails, in your colours. The comparison, the insurer's documents and the support path stay with HelloSafe and the licensed insurer, not with you.

API

Your UI, our rails

Even with quotes rendered in your interface, the policy is concluded with the licensed insurer, and the regulatory documents come from them. Your product stays a product, not a brokerage.

Insurance is regulated province by province, with no national insurance licence. HelloSafe works with insurers and partners authorized in their provinces. Every partner is reviewed at signup: we flag anything specific to your province before you go live.

Data & privacy

Private by default

The program keeps personal data where it belongs: with the traveller and the insurer, not scattered across your systems. Personal information is handled in accordance with Canadian privacy law (PIPEDA) and Quebec's Law 25.

Privacy by design

Consent-first analytics, minimal collection and documented processing, from the click to the certificate, in line with PIPEDA and Quebec's Law 25.

No card data on your side

Payment runs on HelloSafe's hosted checkout. Card numbers never touch your stack: your PCI surface stays at zero.

Reporting without PII

Your dashboard works on clicks, quotes, sales and Sub-IDs. You receive neither identity documents nor insurance policy files.

Scoped, revocable access

API keys are scoped per caller and revocable one by one. Access to conversion data follows the same boundaries.

Fraud & integrity

An attribution chain you can audit

Commissions only move on signed, verified events. The controls that protect HelloSafe protect your revenue too.

Signed postbacks

Every conversion is signed with a per-caller HMAC-SHA256 key and rejected outside a 5 minute replay window.

Ownership guards

A ref must match the link's real owner. Forged or mismatched refs are refused, never silently accepted.

A strict state machine

pending, validated, cancelled: forbidden transitions return an error instead of overwriting the ledger.

Ceilings and audit trails

Per-conversion amount ceilings, FX rates frozen at ingest and an auditable trail on every state change.

Read the API security model →

Marketing rules

Promote hard, promote clean

The program protects travellers and partners alike. The rules fit in two lists.

What works

  • Your own content, comparisons and reviews
  • The partner kit: banners, badges and approved brand mentions
  • Deep links, Sub-IDs and the embeddable widget
  • Newsletters, social posts and client messages (with consent)

What gets accounts closed

  • Bidding on the HelloSafe brand in paid search
  • Misleading claims about prices or coverage
  • Unsolicited messaging and spam
  • Cashback mechanics and forced browser extensions

Compliance, in questions

What partners check before they sign.

Do I need an insurance licence to join the program?

No. HelloSafe is an independent marketplace that compares plans from licensed Canadian insurers, and it never sells or underwrites a policy. Insurance is regulated province by province; you refer and route, and the policy is concluded with the licensed insurer.

Who handles claims and complaints?

The licensed insurer, with HelloSafe routing the traveller to the right path. The traveller gets the insurer's assistance line and a formal complaints process. Your role ends at the referral, and your dashboard keeps the commission visible.

Do my systems ever touch card data?

No. Payment runs on HelloSafe's hosted checkout. Your stack never sees a card number, which keeps your PCI exposure at zero.

What personal data do I receive as a partner?

Practically none. Reporting is built on clicks, quotes, sales and the Sub-IDs you define. Identity documents and policy files stay between the traveller, the insurer and HelloSafe, handled under PIPEDA and Quebec's Law 25.

Is the white-label journey compliant too?

Yes. White-label changes the brand on the journey, not who carries the risk. The policy is still concluded with the licensed insurer, and the regulatory documents come from them. HelloSafe never sells or underwrites.

Which marketing practices are prohibited?

Brand bidding on HelloSafe in paid search, misleading claims, spam, cashback mechanics and unsolicited extensions. The full list ships with the program terms; accounts that cross it are closed.

Which provinces can my audience be in?

Insurance is regulated province by province, and one link routes each visitor to the journey localized for their market. At signup we review your audience and flag anything specific to your province before you go live.

A compliance question we didn't cover? Contact us

Zero licensing, full speed

Distribute insurance, skip the brokerage

Tell us where your audience is and how you want to integrate. We confirm the compliant path for your province within 24 hours.