Register Account V1

post

https://api.cowbellcyber.ai/api/account/v1/account

Prime 100 | Submit a new policyholder account. Account name, address, security assessment questions, and other firmographic data is required.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Developer Tips:

API partner must be granted permission to pass agency IDs to Cowbell on a per agency basis. Please email or slack the agency you would like to support to [email protected]. Not doing this will result in a “Agency with the following [id] is not accessible" response.
For the list of most common responses, please refer to our FAQs page.

Query Params

isFormattedError

boolean

isFormattedError

Body Params

Account data transfer object (DTO), used to register and update a policyholder account

accountId

string

Account ID, only required when updating an existing account

address1

string

required

Address line 1

agencyId

string

required

ID of the Retail Agency to which the account belongs

agentEmail

string

required

Agent / Producer email id

agentFirstName

string

required

Agent / Producer first name

agentLastName

string

required

Agent / Producer last name

backupFrequency

string

enum

Please indicate how frequently You, or Your outsourced service, backup sensitive/critical data and critical systems.

Allowed:

businessContinuityMeasures

array of strings

Please identify which of the following business continuity measures Your organization has in place.

businessContinuityMeasures

Allowed:

city

string

required

City

claimHistory

int32

enum

required

Has the organization filed any claims due to a cyber event? 0=Never, 1=within last 12 months, 2=with last 2 years, 3=within last 3 years, 4=within last 4 years, 5=within 5years or more

Allowed:

country

string

enum

required

Country, default is US

Allowed:

domainName

string

Main domain name, e.g. abc.com

entityType

string

enum

required

Entity type.

Allowed:

isAuthenticatingFundTransferRequests

boolean

required

Do policy holder employees authenticate funds transfer requests (e.g. by calling a customer to verify the request at a predetermined phone number)? Affirmative answer is required to be eligible for Social Engineering endorsement.

isPreventingUnauthorizedWireTransfers

boolean

required

Do policy holder employees prevent unauthorized employees from initiating wire transfers? Affirmative answer is required to be eligible for Social Engineering endorsement.

isSecurityOfficer

boolean

required

Does the policyholder agree to be the designated Information Security Contact?

isSecurityTraining

boolean

required

Does policyholder provide mandatory information security training to all employees at least annually? If not, are they willing to implement it during the policy period?

isVerifyingBankAccounts

boolean

required

Do policy holder employees verify vendor/supplier bank accounts before adding to accounts payable systems. Affirmative answer is required to be eligible for Social Engineering endorsement.

naicsCode

int32

required

6-digit NAICS code. Use NAICS API to find the industry code, if needed.

name

string

required

Registered business name (not DBA)

natureOfBusiness

string

Nature of business

noOfEmployeesAll

int32

required

Number of employees

otherRevenue

double

ownershipType

string

enum

required

Ownership type.

Allowed:

phoneNumber

string

Business phone number

policyContactEmail

string

required

Policyholder contact email

policyContactFirstName

string

required

Policyholder contact first name

policyContactLastName

string

required

Policyholder contact last name

region

string

revenue

double

required

Latest revenue in USD

secondNaicsCode

int32

6-digit second NAICS Code, if applicable

sicCode

string

sicPrimaryDesc

string

sicSecondaryDesc

string

state

string

required

State (2-letters uppercase)

useCloudStorage

boolean

required

Does the policyholder have sensitive information stored on the cloud?

useEncryption

boolean

required

Does the policyholder encrypt all emails, mobile and computing devices containing sensitive information (e.g., PII, PHI, PCI) sent to external parties?

yearEstablished

int32

required

Year when the business was established / registered

zipCode

string

required

Zip/ Postal Code

Headers

X-Forwarded-Proto

string

X-Forwarded-Proto

Responses

400

Bad Request

401

Unauthorized

409

Conflict

200Success