One login. Three workspaces.

One relationship. Every financial need.

Marketing, dialing, and client review, all on the same encrypted record — so a lead's consent status doesn't get lost between your ad platform and your dialer.

Built for insurance agencies & MGAs 5 checks before every call goes out A privacy policy you can actually read
Sign in →

We're a software company, not an insurance carrier — using Corvlyx doesn't make you compliant by itself.

Abstract 3D scene of a phone, shield, and documents on a navy and gold network.
Marketing · Lead Ops · Financial OS

Platform

Three workspaces. One record for each client.

Where a lead comes in, how you're allowed to contact them, and what they end up buying — it's all the same record. No spreadsheet exports, no second CRM to keep in sync.

01 — Marketing

Marketing

Your pitch to the world, plus wherever pilot and demo requests land before anything else happens.

View pricing
02 — Lead Operations

Lead Operations

Leads come in by hand, from vendors, or off an ad webhook. From there: the auto-dialer, voice hand-offs, texting on WhatsApp, duplicate cleanup, and reporting — every one checked against the actual statute before a call goes out.

Open workspace
03 — Financial OS

Financial OS

Once someone's a client, this is where you look at their coverage gaps, run the numbers on what they need, put together a proposal, and handle referrals — synced to Google Calendar and Gmail.

Explore Financial OS

Compliance

Built for calls that can get you sued if you get them wrong

Before your dialer touches a lead, five things get checked: consent, whether it's legal to call right now, do-not-call status, whether the agent's actually licensed for this state and product, and — if a voice bot's involved — disclosure. None of that lives in a policy PDF nobody reads. It's in the code path.

Consent has to hold up in court

A checkbox in your CRM isn't the same as the written consent an autodial statute actually requires — so the dial path won't accept it as one.

We go by their clock, not yours

TCPA gives you an 8am–9pm window — in the lead's time zone, not wherever your office happens to sit.

The agent has to actually be licensed for this

If the lead's in Florida asking about life insurance, the agent dialing them needs to be licensed for Florida life insurance. Not close — actually licensed.

Capabilities

One deployment, not five tools duct-taped together

Every intake form, every call, every text, every financial review — it all writes to the same audit trail.

Encrypted at rest

Your data's stored with AES-256-GCM, and even the lookup indexes for phone and email are HMAC'd — a raw phone number never just sits in a column.

Voice & messaging

Voice intake, warm hand-offs for approval, and texting over SMS or WhatsApp. Someone texts STOP, they're suppressed everywhere — SMS and voice DNC both, same moment.

Financial OS & FNA

Client profiles, a real financial-needs calculator, coverage-gap review, and plan proposals your agents actually review before anything reaches a client — on the same record you already have.

Privacy & audit

A public API for your privacy policy, and a hash-chained audit log behind it — so if someone asks who touched a record and when, you actually have an answer.

SMS & Instagram DM assistant

Someone texts or DMs you on Instagram, and it replies right away, figures out what kind of insurance they want, and hands them to a licensed agent. No LLM guessing — it's deterministic, and it respects consent the whole way.

Smart booking calendar

Once a lead's qualified, they're matched to a licensed agent and shown real open slots pulled from that agent's actual calendar. We don't invent a time and hope it works.

Integrations

Plugs into what you already use

Calendar and email connect over OAuth. Vendor leads and Meta/TikTok lead ads come in over webhooks, once you've got them configured.

Scheduling

Google Calendar

Pulls agent availability and books real appointments — connected once over OAuth2, no manual syncing.

Email & inbox

Gmail

Keeps the email thread with a client in one place, with templates and inbound routing once live sync is switched on.

Lead sources

Vendor & ad ingest

However a lead reaches you — vendor ping-post, Meta Lead Ads, TikTok — it gets fraud-scored and checked for duplicates the same way.

Email outreach

SendGrid

Runs the weekly outreach to uninsured leads and any transactional email, with webhook signatures actually verified.

Telephony

Twilio

The auto-dialer, voice intake, approval transfers, SMS, and WhatsApp all run through here — signatures checked on every webhook.

Privacy

Policy API

A public /api/privacy-policy endpoint, in markdown or JSON, for whatever your onboarding packet or privacy program needs.

Pricing

Flat per deployment

You're not paying per seat — you're paying for the legal exposure we're covering. Telephony and model usage get passed through at cost.

Core

The dialer with all five compliance checks built in, plus one client record for your whole agency.

Loading…

  • All three workspaces on one deployment
  • Auto-dialer + calling-hour, consent, DNC, and license checks
  • Three intake pipelines, dedup, reporting/export
  • Encrypted SQLite with dedicated deployment disk
  • Email support during the pilot
Recommended

Studio

Everything in Core, plus voice intake, the FNA calculator, proposals, messaging, and live Calendar/Gmail sync.

Loading…

  • Everything in Core
  • Voice intake, approval-transfer, FNA, proposals
  • SMS/WhatsApp messaging with STOP → DNC
  • SMS assistant that qualifies leads and books consultations
  • Live Google Calendar and Gmail sync

Talk to us

Running more than one deployment, need a state we haven't built yet, or just want more time to kick the tires? Let's talk.

Custom

  • Not a self-serve SKU — we scope this per engagement
  • Additional autodial-consent states beyond FL/IN/OK
  • Heads up: no SSO yet — today it's one shared login

Trust

Encrypted, auditable, gated

Consent fields the dialer actually checks, not just stores. A privacy policy API anyone can hit. An audit log that's hash-chained so it can't be quietly edited. No badge slapped on until we've earned it.

  • AES-256-GCM at rest, HMAC on the phone and email indexes
  • Written-consent gates for FL, IN, and OK — fails closed, not open
  • Text STOP on SMS or WhatsApp and it suppresses voice DNC too, same list
  • One database per deployment, no multi-tenant mixing — audit log is hash-chained
  • Your licensed producers are still the ones responsible for solicitation and advice

Get started

Run the gates on your own leads

Start a 30-day pilot with your own leads, or have us walk you through the dial path first.

We don't certify that your operation is TCPA- or state-law compliant — that's still on you and your counsel.

Start a 30-day pilot

This spins up a dedicated deployment for you — it's a request we follow up on, not an instant signup.

Request a demo

We'll actually walk you through the five checks in a sandbox — no slide deck.

You were referred to Corvlyx

Tell us a little about yourself and who sent you our way — a licensed agent will reach out.

Which insurance line(s) are you interested in?

Get a quote

Tell us what you're looking for — a licensed agent will follow up.

Which insurance line(s) are you interested in?

Terms & privacy (draft)

Privacy Policy (effective September 1, 2026): Read full policy · JSON

Corvlyx is a software vendor. Your organization (the tenant) is the data controller for consumer lead and client data; Corvlyx processes that data to deliver intake, voice, messaging, outreach, and financial review workflows. Data is encrypted at rest when configured. The Service assists with consent and calling-time checks but does not certify TCPA, state insurance, or privacy-law compliance.

This is not legal advice and not a customer contract. Customer terms remain counsel-reviewed drafts. Do not display SOC 2, ISO 27001, GDPR, or CPRA marks until attested reports, a data map, subprocessors list, breach process, and counsel sign-off exist.