Zachary InsureLink — Access Assured.
The API-first, wallet-native, compliance-audited insurance referral platform for Uganda's licensed agents. Onboard against the 2,594-agent IRA registry, credit net commissions in one atomic wallet transaction, and let ZFA admins reconfigure fees, tax and investment rates from the same authenticated surface.
Built for the whole insurance stack
One API surface: agent onboarding, referral pipeline, commission calculation, wallet ledger, investments, claims, disputes, regulator reporting, and everything that has to be audit-safe under Ugandan financial regulation.
Fine-grained permissions
251 hardcoded system permissions; every one of the 380 endpoints is gated. A build-time lint blocks unguarded routes.
Wallet + Investments
Agents' approved commissions credit an on-platform wallet — net of ZFA-configurable fees, tax and levies. Fixed-term + call investments compound daily.
Configurable deductions
ZFA admins publish fees, WHT, membership and levies via the API. Each rule has scope, targeting and versioning; the engine applies them in priority order.
Policies · Claims · Renewals
End-to-end policy lifecycle with pro-rata cancellation, endorsements, 9-state claim workflow and 60/30/7-day renewal sweeps.
Compliance-first
Hash-chained audit trail with a daily verifier, DSAR export/erase, SIEM push, regulator record-request workflow, sanctions/PEP screening.
2,594 IRA agents preloaded
Every currently-licensed insurance agent from the IRA of Uganda's 30 June 2026 register is available for fast-track account creation.
Three requests to your first referral
Every endpoint takes the same shape: authenticate, present the right permission, get a RESTful JSON response. Full flow below.
Log in
POST /api/v1/auth/login with your seeded admin credentials — returns access + refresh tokens.
Onboard an agent
POST /api/v1/agents/register — the platform pre-fills licence data from the IRA register on the entered IRA number.
Create a referral
POST /api/v1/referrals — a commission row is auto-created; approving it credits the agent's wallet net of active deductions.
Auditable by design
Every state change writes a hash-chained audit event. A nightly verifier walks the chain and pages on tamper. Every write is under a permission the security lint enforces at build time.
Hash-chained ledger
Every audit_event carries previousHash, currentHash, andchainSeq. Verifier runs daily at 01:00 UTC.
SEV-1 tamper detection
A mismatched hash writes audit.chain.verify.tamper_detected and pages compliance. Runbook lives at /runbooks/incident.
SIEM export + DSAR
HMAC-signed cursor-based push to your SIEM. GDPR-adjacent DSAR export + right-to-erase endpoints ready for regulator requests.