BOXX Insurance

{{#invoke:infobox|infoboxTemplate|child= | bodyclass = vcard

| above =

BOXX Insurance

| subheader = BOXX Insurance Inc. | subheaderstyle = font-weight:bold; font-size:105%;

| image = {{#invoke:InfoboxImage|InfoboxImage|image=Logo of BOXX Insurance.svg|size=|sizedefault=frameless|alt=}} | caption =

| header1 = Corporate identity

| label2 = Type | data2 = Private — insurtech MGA, Lloyd's coverholder | class2 = category

| label3 = Traded as | data3 =

| label4 = ISIN | data4 =

| label5 = LEI | data5 =

| label6 = Registration number | data6 =

| label7 = Regulated | data7 =

| label8 = License type | data8 = Managing general agent (MGA)
Lloyd's coverholder
U.S. insurance producer

| label9 = NPN | data9 = 20139876

| label10 = Coverholder reference | data10 =

| label11 = License number | data11 =

| label12 = Incorporation | data12 =

| label13 = Founded | data13 = 2018 (2018){{#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Start date and age with unknown parameter "_VALUE_"|showblankpositional=1| 1 | 2 | 3 | br | df | end | p | paren }}

| label14 = Headquarters | data14 = Toronto | class14 = label

| label15 = Country | data15 =

| label16 = Domicile | data16 =

| label17 = Licensed jurisdictions | data17 = Canada
United States
Europe (selective)

| label18 = Regulator | data18 =

| label19 = Ultimate parent | data19 = Zurich Insurance Group

| label20 = Major shareholders | data20 = Zurich Insurance Group

| label21 = Group status | data21 =

| label22 = Key people | data22 = Vishal Kundi (CEO, Co-founder)
Mike Senechal (Co-founder)
Neil Morrison (Board Chair)
Jonathan Weekes (President, Canada)
Philip Baker (Chief Underwriting Officer)
Steve Penney (CTO)
Neal Jardine (Chief Cyber Intelligence and Claims Officer)
Jack Brooks (Head of Hackbusters and Virtual CISO)

| label23 = Number of employees | data23 = 36

| header24 = Business & markets

| label25 = Operating status | data25 =

| label26 = Customer segments | data26 = SME commercial cyber
Consumer/personal cyber
Affinity partners

| label27 = Lines of business | data27 = Cyber insurance
Tech E&O
Media liability
Financial crime

| label28 = Business segments | data28 = Business
Household
Partner/affinity

| label29 = Main products & services | data29 = Cyberboxx Business 5.0
Cyberboxx Home
Tech E&O by BOXX
Cyberboxx Assist

| label30 = Technology platform | data30 = Templarbit (cyber threat intelligence, acquired {{#invoke:Date time|generate_date}}{{#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Start date with unknown parameter "_VALUE_"|showblankpositional=1| 1 | 2 | 3 | 4 | 5 | 6 | 7 | df }})

| label31 = Capacity providers | data31 = Certain Lloyd's Underwriters
Boiler Inspection and Insurance Company of Canada (Munich Re)
Hartford Steam Boiler

| label32 = Distribution | data32 = Insurance brokers
Partner/affinity channels (banking, insurance, retail/e-commerce, mobile operator/telco)
App-based policy management

| label33 = Geographic markets | data33 = Canada
United States
Spain
Switzerland
Dubai
India

| label34 = Branches | data34 =

| label35 = Customers served | data35 = close to one million (As of July 2025{{#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:As of with unknown parameter "_VALUE_"|ignoreblank=y| 1 | 2 | 3 | alt | bare | df | lc | post | pre | since | url }})

| label36 = Competitors | data36 = At-Bay
Coalition
Corvus Insurance
Cowbell
Resilience
Stoïk
Eye Security

| label37 = Market share rank | data37 =

| header38 = Key financials

| label39 = Currency | data39 =

| label40 = Market cap | data40 =

| label41 = Revenue | data41 =

| label42 = Insurance revenue | data42 =

| label43 = Operating income | data43 =

| label44 = EBITDA | data44 =

| label45 = Net income | data45 =

| label46 = Gross written premium | data46 =

| label47 = Net written premium | data47 =

| label48 = Loss ratio | data48 =

| label49 = Combined ratio | data49 =

| label50 = Commission / MGA fee | data50 =

| label51 = Total assets | data51 =

| label52 = Invested assets | data52 =

| label53 = Technical reserves | data53 =

| label54 = Contractual service margin | data54 =

| label55 = Net debt | data55 =

| label56 = Equity | data56 =

| label57 = Operating margin | data57 =

| label58 = Solvency ratio | data58 =

| label59 = Return on equity | data59 =

| label60 = Total funding raised | data60 = US$24.5 million

| label61 = Last funding round | data61 = Series B, US$14.4M, {{#invoke:Date time|generate_date}}{{#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Start date with unknown parameter "_VALUE_"|showblankpositional=1| 1 | 2 | 3 | 4 | 5 | 6 | 7 | df }}

| label62 = Last known valuation | data62 =

| label63 = Lead investors | data63 = Zurich Insurance Group
Zurich Insurance Company Ltd

| label64 = Capital structure | data64 =

| label65 = Insurer financial strength | data65 =

| label66 = Capacity partner ratings | data66 = A- or better

| label67 = External ratings | data67 =

| data68 =

}}{{#invoke:Check for unknown parameters|check|unknown=|preview = Page using Template:Infobox company with unknown parameter "_VALUE_"|ignoreblank=y | address | alt | branches | capacity_partner_ratings | capacity_providers | capital_structure | caption | child | combined_ratio | commission_rate | competitors | country | coverholder_ref | csm | currency | customer_segments | distribution | domicile | ebitda | embed | equity | exchange | financial_year | footnotes | founded | geographic_markets | group_status | gwp | headquarter | headquarters | ifsr | image | image_size | imagesize | incorporated | incorporation | insurance_jurisdictions | insurance_revenue | invested_assets | isin | key_people | last_round | last_valuation | lead_investors | legal_name | lei | license_number | license_type | lines_of_business | logo | logo_alt | logo_caption | logo_size | loss_ratio | market_cap | market_share_rank | markets_served | name | net_debt | net_income | npn | num_customers | num_employees | nwp | operating_income | operating_margin | operating_status | parent | products | ratings | registered | registration_number | regulated | regulator | reporting_year | revenue | roe | segments | shareholders | shareholders_equity | solvency_ratio | status_in_group | supervisory_authority | technology_platform | technical_reserves | ticker | total_assets | total_funding | total_revenue | type | ultimate_parent }}

The following sections provide further details.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Corporate and regulatory profile

🏢 Founded and headquartered. BOXX Insurance Inc. is a cyber-focused insurtech and managing general agent (MGA) founded in 2018 and headquartered in Toronto. Zurich Insurance Group completed the acquisition of BOXX on 3 July 2025, positioning the company to provide retail and SME cyber insurance and services on a global basis. BOXX stated it would continue to operate as a standalone entity following the transaction.

🔧 Delegated authority model. BOXX operates as a licensed MGA and Lloyd's coverholder under a delegated authority model, meaning it underwrites, prices, and sells policies, manages renewals, and maintains partnerships with capacity providers. Public materials emphasize the MGA/coverholder framework using third-party insurer capacity rather than a proprietary licensed carrier balance sheet.

📋 U.S. and Lloyd's licensing. The U.S. entity, BOXX Insurance LLC, holds National Producer Number (NPN) 20139876 and is registered across multiple states as an insurance producer. BOXX publicly asserts Lloyd's coverholder status, and its policy wordings include endorsements signed on behalf of Certain Lloyd's Underwriters, confirming Lloyd's capacity participation.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Leadership and governance

👤 Co-founders. BOXX was co-founded by Vishal Kundi and Mike Senechal. Kundi serves as CEO and brings approximately 20 years of experience in global insurance corporates. Senechal's career has been centred in technology; he built a software development company and co-founded a fintech firm subsequently acquired by SoFi.

👥 Senior leadership. Key officers identified in public materials include Jonathan Weekes (President, Canada), Philip Baker (Chief Underwriting Officer and policy signatory), Steve Penney (CTO), Neal Jardine (Chief Cyber Intelligence and Claims Officer), and Jack Brooks (Head of Hackbusters and Virtual CISO).

🪑 Board chair. Neil Morrison is listed as Chair of BOXX Insurance Inc. in Aviva plc AGM materials.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Ownership, funding, and capitalization

💰 Venture financing. BOXX raised a total of US$24.5 million in institutional capital across two rounds over approximately 16 months, with Zurich Insurance Group serving as lead investor in both.

💵 BOXX Insurance — venture funding rounds (USD millions)

Round	Date	Amount raised	Lead investor	Notable co-investors	Cumulative funding
Series A	2021-09-22	US$10.0M	Zurich Insurance Group	Cyber Mentor Fund; SixThirty Ventures	US$10.0M
Series B	2023-01-31	US$14.4M	Zurich Insurance Company Ltd	—	US$24.5M

🤝 Zurich collaboration arc. Zurich initially described its relationship with BOXX as a global collaboration emphasising integrated cybersecurity and insurance solutions for SMEs and consumers, announced in September 2021. Zurich subsequently led the Series B in January 2023, and the relationship culminated in the full acquisition completed in July 2025. Following the acquisition, BOXX's capital strategy is expected to be driven by Zurich group priorities rather than standalone venture financing.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Business model, customer segments, and product architecture

⚙️ MGA economics. BOXX retains a fixed percentage of premiums collected to operate the business, while the remainder of premium supports claims and capital costs borne by its insurance backers — a standard MGA-style fee arrangement.

👥 Customer segments. BOXX is positioned across SME commercial cyber and consumer/personal cyber, and also distributes through affinity partners. As of January 2023, the company reported protecting over 250,000 individuals and 10,000 businesses. By the time of the July 2025 acquisition announcement, BOXX stated it had rapidly scaled to serve close to one million customers across five continents. The product suite spans offerings for businesses, households, and partner/affinity channels.

📊 Segment mix inference. The disclosed customer counts — hundreds of thousands of individuals and close to one million total customers — are structurally consistent with a material embedded/affinity and consumer component, because SME-only cyber MGAs typically require exceptionally large broker penetration to reach comparable customer volumes at commercial policy price points.

🏗️ Underwriting signals. The Cyberboxx Business application collects data including last-12-month gross revenue, employee count, and desired cyber limit. The Tech E&O application flags certain higher-risk activities for disclosure, including adult content, cannabis, cryptocurrency/blockchain, data aggregation, debt collection, managed IT services, payment processing, and gambling — reflecting a cyber and tech E&O underwriting posture sensitive to elevated digital risk classes.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Insurance products and cybersecurity services

📦 Core product lines. BOXX markets an integrated model across cyber insurance and security services for businesses and households, supplemented by a tech E&O line. Key named products include Cyberboxx Business 5.0 (cyber, data, and privacy insurance), Cyberboxx Home (personal cyber insurance plus assistance), Tech E&O by BOXX (E&O, media, and cyber insurance), and Cyberboxx Assist (a tools and services layer for business and home customers).

📝 Cyberboxx Business 5.0. The Cyberboxx Business policy is written on a claims-made and reported basis and is modular: coverage applies only for insuring agreements for which a limit appears in the Declarations, meaning modules may be elective or tiered. First-party coverages include incident response costs (legal, forensics, notification, call centre, credit monitoring, identity monitoring, and public relations), cyber extortion, data recovery, bricking, business interruption (including contingent and system-failure variants), reputation protection, and key-person cover. Third-party coverages include information privacy liability, regulatory defence and awards, PCI DSS liability, media liability, and network security liability. The policy also incorporates financial crime modules covering social engineering and client social engineering loss.

⚔️ Notable exclusions. Cyberboxx Business includes a war and cyber operation endorsement referencing "Specified States" and defining "Impacted State," signed on behalf of Lloyd's. Additional exclusions address intellectual property in manufacturing/import/design/packaging contexts, unlawful biometric data collection, discrimination, and insured-versus-insured scenarios.

🏠 Cyberboxx Home. Cyberboxx Home is positioned as personal cyber insurance plus assistance, underwritten by the Boiler Inspection and Insurance Company of Canada, a Munich Re company. The product includes membership benefits tied to Equifax identity and credit monitoring services.

🏡 BOXX Insurance — Cyberboxx Home illustrative policy limits (CAD)

Coverage module	Limit
Cyber attack	$25,000
Cyber fraud	$25,000
Cyber extortion	$2,500
Cyber bullying	$25,000
Data breach	$25,000
Home title recovery expenses	$25,000

💼 Tech E&O by BOXX. The Tech E&O wording encompasses E&O, media, and cyber insurance, with third-party insuring agreements extending beyond pure cyber to include professional E&O, technology E&O, technology products liability, and technology discrimination liability. The policy also contains first-party cyber modules (incident response, extortion, data recovery, business interruption variants) and financial crime modules including invoice manipulation and social engineering of key personnel. A war and cyber operation endorsement in the Tech E&O specimen includes an attribution framework with an explicit carve-back for certain impacts on systems not physically located in an impacted state, signed on behalf of Certain Lloyd's Underwriters referencing a Unique Market Reference Number.

🛡️ Pre-bind and continuous services. BOXX's service layer encompasses pre-bind underwriting support, including external attack surface and vulnerability monitoring, and collection of security-control posture data (MFA, backups, patch cadence, EDR) during the application process. For in-force business policyholders, Cyberboxx Business provides real-time threat monitoring, dark web "hacker chatter" surveillance, external attack surface monitoring, actionable alerts, and vendor discounts for security tooling (EDR, XDR, MFA, cloud backups).

🚨 Hackbusters incident response. Hackbusters is positioned as support that can engage before a claim is filed, including continuous scanning and dark web monitoring. The service provides free assurance and guidance up to a threshold of three hours before a client needs to consider filing a claim. For consumer customers, Cyberboxx Assist for Home provides identity monitoring via breach scans, security assessments, guided assistance, and 24/7 incident response support.

🧠 Templarbit acquisition. In November 2022, BOXX acquired Templarbit, a Palo Alto–based cyber threat intelligence platform focused on vulnerability identification across digital assets, to strengthen proactive cyber risk protection capabilities. The acquired company's founder joined BOXX Labs.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Distribution, licensing, and geographic footprint

🌐 Distribution architecture. Policies are primarily sold through insurance brokers or partners, with certain plans enabling customers to manage policies and file claims via an app. BOXX also offers solutions for corporate partners in banking, insurance, retail/e-commerce, and mobile operator/telco verticals as part of its partner and affinity distribution strategy.

🗺️ Geographic presence. BOXX operates in Canada and the United States, with selective products or collaborations in Europe and other regions. Reported office locations include Toronto, Miami, Zurich, Dubai, and Mumbai. U.S. market entry was formally announced in October 2021 alongside the appointment of Hilario Itriago as President of BOXX USA.

🇪🇺 European partnerships. In Spain, BOXX partnered with AXA to launch a cyber risk mitigation solution for small businesses in January 2024. In Switzerland, BOXX announced a personal cyber product partnership with Zurich Insurance Group in May 2024.

📜 Licensing approach. BOXX's regulatory framework combines U.S. producer licensing at the entity level, Lloyd's capacity access via coverholder arrangements evidenced by policy endorsements signed on behalf of Lloyd's underwriters, and local admitted carrier underwriting for at least certain Canadian personal cyber cover through the Boiler Inspection and Insurance Company of Canada.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Capacity providers, partnerships, and AXA relationship

🏦 Lloyd's and admitted capacity. Both the Cyberboxx Business and Tech E&O policy specimens contain Lloyd's-signed endorsements, confirming Lloyd's participation as a capacity provider for those product lines. Cyberboxx Home is separately underwritten by the Boiler Inspection and Insurance Company of Canada (Munich Re). BOXX states its insurance partners are rated A- or better and references backers including Munich Re and Hartford Steam Boiler.

🔗 Strategic partnerships. Zurich's involvement with BOXX evolved from a global collaboration announced in September 2021, through lead investment in both venture rounds, to completed acquisition in July 2025. The Templarbit acquisition in November 2022 internalised cyber threat intelligence and attack surface capabilities. Cyberboxx Home embeds identity and credit monitoring services through a partnership with Equifax. In India, BOXX supports Housing.com customers with cyber protection as a partner distribution example.

🅰️ AXA partnership. A direct partnership between BOXX and AXA, evidenced through a January 2024 press release, centres on a cyber risk mitigation solution for small businesses. The solution includes external perimeter scanning with a cyber risk score and peer benchmarking, 24/7 dark web monitoring and compromised credential alerts, employee awareness training with digital risk assessments, and an "instant response wallet" for post-breach guidance. The initial launch geography was Spain, and the announcement included remarks attributed to Alfonso Zayas Satrustegui of AXA Seguros España.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Competitive positioning, performance signals, and risk factors

📈 Operational scale. BOXX disclosed the following operational milestones: as of January 2023, over 250,000 individuals and 10,000 businesses protected; staff growth from 5 to 36 employees in the preceding year; and by July 2025, close to one million total customers served.

📊 BOXX Insurance — disclosed operational metrics

Metric	As of date	Figure	Source
Individuals protected	January 2023	>250,000	Series B announcement
Businesses protected	January 2023	>10,000	Series B announcement
Total customers	July 2025	~1,000,000	Acquisition announcement
Headcount	January 2023	36	Series B announcement

🏰 Competitive moat. BOXX is best characterised as a prevention-led cyber MGA operating across consumer and SME segments with embedded service delivery and partner distribution. Key differentiators include 24/7 incident response access without immediate claim filing, vCISO guidance, and continuous monitoring (dark web, password leaks, attack surface). The Cyberboxx Business wording includes a comparatively expansive set of first-party, third-party, and financial crime modules, positioning the product closer to a "cyber plus crime" package. The Templarbit acquisition supports an argument for proprietary threat intelligence capabilities rather than pure reliance on third-party tooling. Post-acquisition integration into Zurich's platform strategy via Zurich Global Ventures is likely to strengthen distribution access and long-term capacity stability relative to standalone MGAs.

🌍 Peer context. Within the cyber insurtech MGA ecosystem — which includes peers such as At-Bay, Coalition, Corvus Insurance, Cowbell, Resilience, Stoïk, and Eye Security, among others — BOXX clusters most closely with "cyber insurance plus security services" platforms. BOXX stands out by maintaining a visible personal/household cyber line alongside SME and partner-distributed offerings, as evidenced by its published customer counts and explicit household product documentation.

⚠️ Risk factors. Several structural risks merit attention:

• Capacity dependency: As a coverholder/MGA reliant on external insurer paper, BOXX is exposed to capacity repricing, underwriting authority constraints, and performance management tightening.
• Systemic cyber aggregation: War and cyber operation endorsements in policy specimens illustrate ongoing market tightening and potential coverage disputes in state-linked cyber events, a structural portfolio risk for cyber MGAs.
• Regulatory complexity: Products contemplate privacy breach response, regulatory defence, and cross-jurisdiction considerations, implying compliance complexity as BOXX scales internationally.
• Acquisition integration: Execution risk remains around product integration, distribution alignment, and technology platform consolidation under Zurich ownership, with limited disclosed post-close operational detail.
• Services scalability: Maintaining service quality (vCISO, Hackbusters response, monitoring) at scale is cost-intensive and operationally complex as customer counts approach seven figures.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Company timeline

📅 BOXX Insurance — corporate timeline

Date	Event
2018	Company launched.
2020	Founders discuss building a cyber-focused insurtech with a broker-centric digital platform experience.
2021-09-22	Series A of US$10M announced; investors include Zurich, Cyber Mentor Fund, and SixThirty Ventures.
2021-10-01	U.S. expansion announced; Hilario Itriago appointed President of BOXX USA.
2022-11-08	Acquisition of Templarbit announced; founder joins BOXX Labs.
2023-01-31	Series B of US$14.4M led by Zurich; company reports 250,000+ individuals and 10,000+ businesses protected; headcount reaches 36.
2024-01-30	Partnership with AXA to launch cyber risk prevention solution for small businesses, initially in Spain.
2024-04-17	Cyberboxx Business 5.0 product release announced.
2024-05	Personal cyber product partnership with Zurich announced in Switzerland.
2025-07-03	Zurich completes acquisition of BOXX; BOXX states it will operate as a standalone entity post-transaction.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

Glossary

📖 Managing general agent (MGA). An intermediary with delegated authority from an insurer to perform underwriting functions, often including pricing, binding, and policy administration, and in some cases claims management.

📗 Coverholder. A Lloyd's delegated authority arrangement in which a firm is authorised by a Lloyd's managing agent to enter into insurance contracts on behalf of Lloyd's syndicates under a binding authority agreement.

📘 Binding authority. The contract enabling a coverholder to bind risks on behalf of the capacity provider, subject to agreed underwriting guidelines and controls.

📙 Claims-made and reported. A coverage trigger requiring that a claim be first made and typically reported during the policy period or any applicable extended reporting period.

~*~

{{safesubst:#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Center with unknown parameter "_VALUE_"|ignoreblank=y| 1 | style }}

References

{{#invoke:Check for unknown parameters|check|unknown=|preview=Page using Template:Reflist with unknown parameter "_VALUE_"|ignoreblank=y| 1 | colwidth | group | liststyle | refs }}