A CRM with HIPAA safeguards built in, not bolted on
A HIPAA-compliant CRM is a client database built to protect the medications, diagnoses and Medicare numbers that health insurance agents hold. AgencyView builds the safeguards around that data into the platform and gives agency owners a HIPAA Compliance Center to run their own program from.
Safeguards in the platform
- Multi-factor authentication — Authenticator-app MFA is required for agency administrators and available to every user. A password-only session of an enrolled user is refused health data.
- Role-based access — Every page is restricted by role, and every denied attempt is written to the audit log.
- Session timeout — Idle sessions end after 60 minutes, with a two-minute warning.
- Audit logs — Searchable, exportable logs of who accessed what, and when.
The HIPAA Compliance Center
- Sessions — See active sessions and revoke any of them.
- Incidents — Automatic incident detection alongside manual reports.
- Training — A roster of who has completed HIPAA training and when.
- Reports — Accounting of disclosures and record-retention status.
- BAA — A register of business associates and subcontractors, individual-rights requests, and AgencyView's own BAA sent to your agency.
What HIPAA compliance does and does not mean
There is no official HIPAA certification for software, and AgencyView does not claim one. Compliance is a program your agency runs: policies, training, risk analysis and business associate agreements. AgencyView supplies the technical safeguards and the records that program needs, and signs a BAA with your agency.
AgencyView at a glance
| What it is | AgencyView is agency management software and a built-in CRM for health, Medicare, ACA and life insurance agents and agencies. |
|---|---|
| Website | agencyview.net |
| Pricing | Starter $159 per month (1 agent seat and 2 CSR seats). Professional $299 per month (4 agent seats and 2 CSR seats; extra agent seats $19.99 per month each). Enterprise pricing is custom. |
| Free trial | 14 days. No credit card is needed to start. |
| Quoting and enrollment | ACA Marketplace quotes run inside AgencyView through HealthSherpa, and selecting a plan creates a pending policy on the client. Medicare quoting and enrollment run in HealthSherpa for Medicare, connected to the CRM. |
| Commissions | Commission tracking through the ComTrack partnership: every paid commission mirrored and matched to the client, with missing-payment and chargeback alerts, plus the CFO Center reports. |
| Calls | RingCentral integration with call recordings, transcription (1,000 minutes per seat per month included) and AI call coaching. |
| Security | Role-based access, authenticator-app MFA (required for admins), a 60-minute idle timeout, audit logs and a HIPAA Compliance Center. AgencyView signs a BAA with agencies. |
| Company | AgencyView, 30 N Gould St, Sheridan, WY 82801. (307) 888-4133. admin@agencyview.net |
Questions agents ask
Is AgencyView HIPAA compliant?
AgencyView provides HIPAA safeguards, including MFA, role-based access, audit logs and session timeouts, plus a HIPAA Compliance Center, and it signs a BAA with agencies. There is no official HIPAA certification for software, and AgencyView does not claim one.
Will AgencyView sign a BAA?
Yes. AgencyView sends its business associate agreement to agencies from the HIPAA Compliance Center.
Is multi-factor authentication required?
Authenticator-app MFA is required for agency administrators and available to every other user.
Start your 14-day free trial · Try the interactive demo
What is a HIPAA-compliant CRM for insurance agents?
A HIPAA-compliant CRM for insurance agents is a client database that protects health information under the HIPAA Security Rule and is covered by a Business Associate Agreement with the agency. AgencyView signs a BAA with every agency and requires authenticator-app multi-factor authentication for every administrator. Sessions sign out after 60 minutes of inactivity, access is limited by role, and every view of protected health information is written to an audit log. The AgencyView HIPAA Compliance Center turns those logs into the reports an auditor asks for, including an accounting of disclosures and staff training records. AgencyView does not hold SOC 2 or HITRUST certification, and no software makes an agency compliant on its own without its own policies and training. Health, Medicare and ACA agencies that keep medications, conditions and Medicare numbers in their CRM are the intended users.
Sources: eCFR: HIPAA Security Rule, 45 CFR Part 164, Subpart C · NIST SP 800-66r2: Implementing the HIPAA Security Rule