Evolution Global, Inc. ("Evolution Global," "we," "our," or "us") is a Texas-based insurance technology company headquartered at 6713 Old Jacksonville Highway, Suite 103, Tyler, Texas 75703. We develop and operate a suite of products serving the property and casualty (P&C) insurance industry, including claims management platforms, AI-assisted tools, and professional community services.
For purposes of applicable data protection law, Evolution Global, Inc. is the data controller of personal information collected through our products and websites. Where we engage third-party processors to process personal information on our behalf, we maintain contractual controls consistent with applicable law.
| Contact | Details |
|---|---|
| Legal Entity | Evolution Global, Inc. |
| Headquarters | 6713 Old Jacksonville Highway, Suite 103, Tyler, Texas 75703 |
| Privacy Contact | privacy@evolution.global |
| Compliance Contact | compliance@evolution.global |
| Phone | +1 888-717-1730 |
| Website | evolution.global |
This Privacy Policy governs our collection, use, storage, disclosure, and protection of personal information in connection with all Evolution Global products and services, including:
This Policy does not apply to third-party websites, services, or applications that may link to or integrate with our products. We encourage you to review the privacy policies of any third-party services you use in connection with our products.
Evolution Global products and services are intended exclusively for individuals aged 18 and older. We do not knowingly collect, use, or retain personal information from individuals under the age of 18. Our products are professional tools designed for use by licensed insurance adjusters, claims professionals, carriers, TPAs, and independent adjusting firms.
If we become aware that we have collected personal information from a person under 18, we will delete that information promptly. If you believe a minor has provided us with personal information, please contact us at privacy@evolution.global.
We collect personal information in three primary ways: information you provide directly, information collected automatically, and information received from third parties. The specific information we collect varies by product.
Account Registration and Profile Data
When you create an account with any Evolution Global product, we collect:
Claim and Work Product Data (FileTrac / FileTrac Evolve / ELIAS AI)
When you use our claims management and AI-assisted tools, we receive and process:
Community Content (Conversation Insurance)
When you participate in the Conversation Insurance community, we and our platform provider Mighty Software, Inc. collect:
Communications and Correspondence
We collect any information you include when you contact us by email, phone, or support ticket, including the content of your message and any attachments.
When you access our products and websites, we automatically collect certain technical and usage information:
We may receive personal information about you from the following sources:
We use personal information only for the purposes described below. We do not sell personal information to third parties. We do not use personal information for purposes unrelated to providing, maintaining, and improving our products and services without your consent.
We do not sell personal information. We share personal information only in the circumstances described below.
We engage third-party service providers who process personal information on our behalf under contractual terms that restrict their use of such information to the services they provide to us. Our key service providers include:
| Provider | Purpose |
|---|---|
| Anthropic (Claude) | Primary AI model provider for ELIAS AI — ZDR enterprise agreement in place; no data retained or used for training |
| OpenAI | Backup AI model provider for ELIAS AI — ZDR enterprise agreement in place; no data retained or used for training |
| Google (Gemini / Vertex AI) | Backup AI model provider for ELIAS AI — ZDR enterprise agreement in place; no data retained or used for training |
| Mighty Software, Inc. (Mighty Networks) | Community platform provider for Conversation Insurance — SOC 2 completed; GDPR and CCPA compliant; hosted on AWS; Data Processing Agreement in place |
| Stripe | Payment processing — PCI DSS compliant; we do not store full card numbers |
| Amazon Web Services (AWS) | Cloud infrastructure and hosting for FileTrac, ELIAS AI, and AdjusterIQ |
| AWS Cognito (Amazon Web Services) | Identity and access management, user authentication, and multi-factor authentication (MFA) across all Evolution Global products. Processes authentication credentials, session tokens, and MFA contact information (email address and/or phone number). Operated by Amazon Web Services, Inc. under our AWS enterprise agreement. |
| Drata | Compliance automation and audit management for SOC 2 and ISO 42001 programs |
| Xogito | AWS infrastructure partner |
Evolution Global serves as the identity provider for the unified Evolution Global platform. Authentication credentials and basic profile information may be shared across Evolution Global products to enable single sign-on and consistent access management. We do not share claims data or AI interaction logs across product lines except as necessary to provide the integrated service you have subscribed to.
Within FileTrac and FileTrac Evolve, your activity data, claim assignments, and work product are accessible to the organization (IA firm, carrier, or TPA) that administers your account. Organizations configure their own access controls and determine which users can view which data within their account scope.
Within Conversation Insurance, your profile, posts, and community activity are visible to other community members at the privacy level you select when posting. Mighty Networks, as the platform provider, has access to your membership data as described in their privacy policy.
We may disclose personal information when we believe in good faith that such disclosure is required or permitted by law, including in response to:
Where legally permitted, we will provide you with advance notice of such disclosures.
If Evolution Global is involved in a merger, acquisition, financing, reorganization, or sale of all or a substantial portion of its assets, personal information may be transferred as part of that transaction. We will notify affected users of any material change in ownership or data handling practices.
We may share personal information with third parties in other circumstances where you have given your express consent.
We retain personal information for different periods depending on the product, the nature of the data, and applicable legal requirements. The following summarizes our retention practices by product.
| Product / Data Type | Retention Period |
|---|---|
| FileTrac / FileTrac Evolve — Account and Claim Data | Retained for the duration of the customer's active subscription. Upon termination, data is available for export for 30 days, then deleted within 60 days following the export window. |
| ELIAS AI — Session and Audit Logs | Retained for the duration of the customer's active subscription plus 3 years, to support SOC 2 audit obligations and Ark Alliance CIS integrity verification requirements. |
| AdjusterIQ — Professional Profile Data | Retained for the duration of your active account. If you deactivate your account, data is retained for 90 days to allow reactivation, then deleted. |
| Conversation Insurance — Community Content | Posts and contributions are retained while your membership is active. Upon account deletion, member-generated content may be anonymized or removed per the Mighty Networks platform terms. Personal account data is deleted within 60 days. |
| Website and Application Log Data | Retained for 90 days on a rolling basis, except where extended retention is required for security incident investigation. |
| Payment and Billing Records | Retained for 7 years to comply with tax and accounting legal requirements. |
| Legal Hold Data | If data is subject to a legal hold, litigation, or regulatory investigation, it is retained until the hold is released, regardless of the otherwise applicable retention period. |
In all cases, when data is deleted, we use secure deletion methods consistent with industry standards. We may retain anonymized or aggregated data that cannot be linked to any individual beyond these periods for statistical and product improvement purposes.
We implement and maintain technical and organizational security measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. Our security program includes:
While we take reasonable steps to protect your information, no security system is impenetrable.
In the event of a personal data breach, Evolution Global will:
Breach notifications will include: a description of the nature of the breach, the categories and approximate number of individuals affected, likely consequences, and measures taken or proposed to address the breach.
Evolution Global maintains internal Records of Processing Activities (ROPA) as required by GDPR Article 30 for all personal data processing activities. We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risk to the rights and freedoms of individuals, including ELIAS AI's large-scale processing of claims data using AI models.
For detailed information about our security practices and compliance posture, including access to security documentation available under NDA, visit our Trust Center at evolution.global/trust-center.
Given the central role of AI in our product ecosystem, we are committed to transparency about how personal information is processed within the ELIAS AI layer. This section provides specific disclosures about our AI architecture, data handling practices, and governance framework.
ELIAS AI uses Claude, developed by Anthropic, as its primary foundation model. OpenAI and Google Gemini (via Vertex AI) serve as backup providers. All three providers are engaged under enterprise-level agreements that include zero data retention (ZDR) provisions.
Under our enterprise agreements with Anthropic, OpenAI, and Google:
Separately from the AI model provider layer, Evolution Global maintains comprehensive audit logs of all ELIAS AI interactions within our own infrastructure. These logs record:
These logs are maintained for the periods described in Section 7 and are subject to our security controls. They are used to support compliance with our SOC 2 Type II and ISO 42001 programs, and to maintain the integrity of claims records under the Ark Alliance Certified Integrity Standards (CIS).
ELIAS AI does not take autonomous actions on claim records. Every AI recommendation, output, or suggested action requires review and explicit approval by a licensed adjuster before it is applied to any claim record. This ensures that personal information in claim records is modified only by authorized human professionals, with ELIAS AI serving as an intelligent assistant rather than an autonomous actor.
In compliance with GDPR Article 22, ELIAS AI does not make decisions that produce legal or similarly significant effects concerning data subjects without human review and approval. The four autonomy levels described below all require human oversight at the point of consequential action. No ELIAS AI autonomy level produces legally binding claim decisions without a licensed adjuster's explicit approval.
ELIAS AI operates within a defined framework of four autonomy levels, each of which is fully logged:
Organizations configure the autonomy level that applies to their account. ELIAS AI respects these boundaries absolutely. The Automated level does not produce legally binding claim decisions — a licensed adjuster's explicit approval is required for all consequential actions.
ELIAS AI is built to comply with the Ark Alliance Certified Integrity Standard (CIS), a framework developed by the Ark Alliance Foundation, an independent nonprofit organization. The CIS requires, among other things, that AI-assisted outputs are:
The Ark Alliance Foundation is independent from Evolution Global and provides external governance over the integrity standards applied to ELIAS AI. For more information, visit the Ark Alliance Foundation at evolution.global/ark-alliance-foundation.
We use cookies and similar tracking technologies on our websites and applications. Cookies are small text files stored on your device that allow us to recognize you, maintain your session, and personalize your experience.
The types of cookies we use include:
For detailed information and to manage your cookie preferences, please review our Cookie Policy at evolution.global/legal/cookie-policy. We are currently implementing a cookie consent management platform (CMP) on our Webflow-hosted websites. Until the CMP is fully deployed, non-essential cookies are disabled by default for all visitors. Upon CMP deployment, visitors will be able to provide granular consent for non-essential cookie categories and may withdraw consent at any time through the cookie preference center. The CMP will be in place before the June 1, 2026 effective date of this Policy.
Our websites do not currently respond to browser-based Do Not Track (DNT) signals, as no universal standard for such signals has been adopted.
This section describes your rights with respect to your personal information. The specific rights available to you depend on your jurisdiction. We provide notice of data collection practices at or before the point at which personal information is collected, consistent with applicable law including CCPA § 1798.100(b).
Insurance claim records and associated personal information processed through FileTrac, FileTrac Evolve, ELIAS AI, and AdjusterIQ are subject to significant limitations on deletion and erasure rights. These limitations apply regardless of which jurisdiction you reside in.
Claim records — including data submitted by or about policyholders, claimants, insured parties, and third parties involved in a claim — are required for the lawful processing and administration of insurance claims. The legal bases for retaining this data include: performance of a contract (the insurance policy and claims adjustment engagement), compliance with legal obligations (state insurance regulations, adjuster licensing requirements, carrier reporting obligations), and legitimate interests (maintaining accurate records of insurance claims that may be subject to litigation, regulatory review, or audit).
Specifically:
For Conversation Insurance members, standard erasure rights apply in full. You may delete your community account and associated data by contacting privacy@evolution.global.
For EEA, UK, and Swiss data subjects, the following table maps our primary processing activities to their GDPR Article 6 lawful basis:
| Processing Activity | Lawful Basis (GDPR Art. 6) |
|---|---|
| Account creation and management | Performance of a contract (Art. 6(1)(b)) |
| Claims processing — FileTrac / FileTrac Evolve | Performance of a contract; compliance with legal obligations (Art. 6(1)(b)(c)) |
| ELIAS AI claims intelligence processing | Performance of a contract; legitimate interests — providing AI-assisted claims tools (Art. 6(1)(b)(f)) |
| AdjusterIQ professional profile management | Performance of a contract; legitimate interests (Art. 6(1)(b)(f)) |
| Conversation Insurance community features | Performance of a contract; consent (Art. 6(1)(b)(a)) |
| ELIAS AI audit logging and integrity records | Legal obligation; legitimate interests — SOC 2 compliance, CIS integrity (Art. 6(1)(c)(f)) |
| Security monitoring and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Marketing communications | Consent; legitimate interests (Art. 6(1)(a)(f)) — opt-out available at any time |
| Payment processing | Performance of a contract; legal obligation (Art. 6(1)(b)(c)) |
| Analytics and product improvement | Legitimate interests — improving services (Art. 6(1)(f)) |
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under GDPR or applicable local data protection law:
For material changes to this Policy, Evolution Global will provide at least 14 days' advance notice by email or in-platform notification. Your continued use of Evolution Global products after the effective date constitutes acceptance of changes, to the extent permitted by applicable law.
Evolution Global, Inc. is the data controller of your personal information. For GDPR inquiries and to exercise GDPR rights, contact our designated EU Privacy Contact at privacy@evolution.global. We will acknowledge receipt within 5 business days and provide a substantive response within 30 days.
For UK residents, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. For EEA residents, a list of national supervisory authorities is available at edpb.europa.eu. For Swiss residents, contact the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.
If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA, effective July 1, 2024) grants you the following additional rights:
To submit a Texas rights request, contact us at privacy@evolution.global. We will respond within 45 days, with an optional 45-day extension where reasonably necessary.
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:
To submit a California rights request, contact us at privacy@evolution.global. We will acknowledge receipt within 10 business days and provide a substantive response within 45 days (extendable by an additional 45 days with notice).
California residents may designate an authorized agent to submit CCPA rights requests on their behalf. To submit a request through an authorized agent, Evolution Global requires:
Evolution Global will verify the consumer's identity directly even when a request is submitted by an authorized agent. We will process verified authorized agent requests within the same timelines applicable to direct consumer requests. Submit authorized agent requests to privacy@evolution.global with the subject line "CCPA Authorized Agent Request."
For California residents (CPRA) and other applicable jurisdictions, the following categories of sensitive personal information may be collected in connection with Evolution Global products:
You may request that we limit our use and disclosure of sensitive personal information to purposes necessary to provide the requested services. To exercise this right, contact privacy@evolution.global. Note that the legal processing exemption in Section 11.2 applies to sensitive personal information contained in insurance claim records.
Virginia residents have rights under the VCDPA including access, correction, deletion, portability, and opt-out of processing. To submit a Virginia rights request, contact privacy@evolution.global. We will respond within 45 days. You may appeal our decision within a reasonable time by replying to our response.
To exercise any of the rights described in this Section, contact us at:
We may ask you to verify your identity before processing your request. Response timelines by jurisdiction: GDPR — 30 days (extendable by 60 with notice); CCPA/CPRA — 10 business days acknowledgment, 45 days substantive (extendable by 45 with notice); TDPSA/VCDPA — 45 days (extendable by 45 with notice).
Conversation Insurance is a professional community for P&C insurance industry members, built on the Mighty Networks Pro platform operated by Mighty Software, Inc. ("Mighty Networks"). When you join and use Conversation Insurance, your personal information is processed both by Evolution Global (as the host of the community) and by Mighty Networks (as the platform provider).
In the GDPR context, Evolution Global is the Data Controller for your Conversation Insurance membership and Mighty Networks is a Data Processor acting on our behalf under a Data Processing Agreement. Mighty Networks processes personal information to provide the community platform infrastructure, including:
Mighty Networks has completed a SOC 2 audit (report available under NDA), is GDPR and CCPA compliant, and hosts all data on Amazon Web Services (AWS) with encryption in transit (TLS 1.2+) and at rest.
Mighty Networks collects your IP address and mobile device ID for their own operational purposes (to route responses and determine general geographic location). All other personal information within Conversation Insurance is collected and processed on Evolution Global's behalf.
For full details on Mighty Networks' data practices, please review their privacy policy at mightynetworks.com/privacy-policy. Mighty Networks does not email Conversation Insurance members with marketing communications outside of notifications they opt into within the community.
Mighty Networks has completed a SOC 2 Type II audit and operates under a Data Processing Agreement with Evolution Global. Compliance documentation is available under NDA to appropriate enterprise customers and regulators upon request at compliance@evolution.global.
The Conversation Insurance iOS and Android applications are delivered through the Mighty Networks platform. These applications collect device identifiers and, where you grant permission, GPS location data. Location data is used to facilitate connections between members in your geographic area and is not shared with Evolution Global. You may disable location access through your device settings at any time.
Evolution Global is based in the United States. If you are located outside the United States, your personal information may be transferred to, processed in, and stored in the United States, which may have data protection rules that differ from those in your country.
Where we transfer personal information from the EEA, UK, or Switzerland to the United States or other countries, we do so using legally recognized transfer mechanisms, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other safeguards as required by applicable law.
Where personal data of EEA, UK, or Swiss individuals is submitted to ELIAS AI for processing by our AI model providers (Anthropic, OpenAI, and Google), those transfers to these US-based providers are made pursuant to Standard Contractual Clauses and are further protected by zero data retention agreements that ensure no personal data persists after the AI response is delivered. ZDR is a supplementary measure, not a standalone transfer basis.
For more information about the safeguards we apply to international data transfers, or to request a copy of the applicable Standard Contractual Clauses, contact privacy@evolution.global.
Our products integrate with and may contain links to third-party services, including carrier portals, claims management systems, XactAnalysis, Symbility, Torrent, and other industry tools. This Privacy Policy does not cover the data practices of these third parties.
ELIAS AI connects to external systems through secure, API-only integrations. These integrations pull information into and write results back to connected systems based on your authorization. The privacy practices of connected systems are governed by the terms of those systems, not this Policy.
We encourage you to review the privacy policies of any third-party services you use in connection with Evolution Global products.
We may update this Privacy Policy from time to time to reflect changes in our practices, products, legal requirements, or other factors. When we make material changes, we will:
Your continued use of Evolution Global products after the effective date of any updated Policy constitutes your acceptance of the changes, to the extent permitted by law.
This Privacy Policy and any disputes arising from it are governed by the laws of the State of Texas, United States, without regard to its conflict of law provisions. This does not limit rights you may have under applicable data protection law in your jurisdiction.
If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:
| Method | Details |
|---|---|
| Privacy Inquiries | privacy@evolution.global |
| Compliance Inquiries | compliance@evolution.global |
| Evolution Global, Inc., Attn: Privacy 6713 Old Jacksonville Highway, Suite 103 Tyler, Texas 75703 | |
| Phone | +1 888-717-1730 |
| Trust Center | evolution.global/trust-center |
We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within the timeframes required by applicable law.
Your trust is important to us, and we want to ensure that your personal information is protected.
This Privacy Policy explains how we collect and use your personal information in relation to Evolution Global products, services, events, and websites or applications that link to this Policy (together, the "Evolution Global Products").
It also describes how you can control or exercise your rights related to your personal information.
We process information about you while providing Evolution Global Products. Below, we outline the kinds of information we collect.
We collect information about you when you submit it through Evolution Global Products, including when you create an account with us. This may include your name, email address, profile picture, company name, postal address, and phone number. This may also include your payment information when you purchase any of the Evolution Global Products.
We collect information you provide to us when you open a support request or otherwise communicate with us (such as through third-party social-media sites). This may include your name, email address, title, company, and any other information you provide in your request.
We automatically collect information about you when you access or use Evolution Global Products, including session data, device information (browser type, IP address, device location), and cookies and similar technologies. For more information about how we use cookies and similar technologies, please see our Cookie Policy.
We may also obtain information about you from other sources, including through services linked to your account (such as Google Apps SSO), our affiliates, and third parties that provide business information to us or from public sources.
We use information about you for the following purposes:
We may share your personal information with service providers who work on our behalf; for legal reasons in response to lawful legal process; in connection with business transfers (mergers, acquisitions); with affiliates; with marketing and analytics providers; through social media widgets; and with your consent or at your direction.
We do not sell or share (for the purpose of cross-context behavioral advertising) your personal information, as defined under the CCPA.
The security of your personal information is incredibly important to us. We have implemented, and we continually maintain, a variety of technical and organizational measures to protect your personal information from unauthorized access and against unlawful processing, accidental loss, destruction, and damage.
We only keep your personal information for as long as necessary to fulfill the purposes we collected it for, after which it will be deleted or archived unless we are required to keep it to comply with our legal obligations or for another legitimate and lawful purpose. In some cases, we may anonymize your personal information so that you are no longer identifiable, in which case we may use the resulting information without further notice to you.
Evolution Global Products are not directed to individuals under the age of 16, and we do not knowingly collect or sell the personal information of children under 16.
Our customers may access, update, or change personal information they have provided to us by logging into the relevant Evolution Global application or emailing us at support@evolution.global. Customers may deactivate their accounts by emailing us at support@evolution.global.
You may opt out of receiving promotional emails from Evolution Global by following the instructions in those emails or by logging into your Evolution Global account and selecting communications in your profile.
This section provides additional details about the personal information we process subject to the General Data Protection Regulation (GDPR) and UK GDPR. Evolution Global, Inc. is the data controller of your personal information.
Subject to applicable law, you have the right to access, update, delete, restrict processing of, object to processing of, and withdraw consent for your personal information. We process personal information where necessary to perform a contract, to comply with legal obligations, for our legitimate interests, or with your consent. Personal information transfers outside the EEA are made in accordance with applicable data protection law, including Standard Contractual Clauses.
California residents have the right to access, delete, correct, and restrict the use and disclosure of their sensitive personal information under the CCPA as amended. We do not sell or share (for the purpose of cross-context behavioral advertising) your personal information as defined under the CCPA.
Virginia residents have rights to access, correct, delete, and port their personal information and to opt out of behavioral advertising, automated profiling, and sales of personal information under the Virginia Consumer Data Protection Act (VCDPA). To exercise your rights or appeal a decision, contact us as outlined in the Contact Us section below.
We may occasionally update this Privacy Policy. The date at the top of this Privacy Policy indicates when it was last revised. Any changes will become effective when we post the revised Privacy Policy on this page.
If you have questions or concerns about this Privacy Policy, please contact us at: Evolution Global, Inc., 6713 Old Jacksonville Highway, Suite 103, Tyler, Texas 75703; or privacy@evolution.global.
© 2026 Evolution Global, Inc. All rights reserved.