Policy Document Mgmt & E‑Signature — Host-to-Host Integration

Purpose of Host-to-Host

Generate and manage policy documents (e‑policy, CoC, schedule, invoice) from PAS/UW via API.
Collect legally‑binding e‑signatures with auditable evidence and tamper‑proof PDFs.
Deliver documents via email/SMS/WhatsApp and enable secure downloads with access logs.

Core Data Objects

Templates: layout (DOCX/HTML), merge fields, rules, versions, languages, branding
Documents: policyNo, type (e‑policy/CoC/invoice), checksum/hash, watermark, expiry
Envelope: signers, routing order, roles (proposer/agent/approver), methods (drawn/typed/OTP)
Evidence: audit trail, IP/device, timestamp authority (TSA), signature certificate
Delivery: channel (email/SMS/WA), link tokens, open/download status, bounces
Events: documentRendered, envelopeSent, signed, completed, downloaded, revoked

Example API Endpoints

POST /templates
Create/update template; upload DOCX/HTML & assets

POST /documents/render
Render PDF with merge fields & watermark

POST /envelopes
Create envelope with signers, routing, and expiry

POST /envelopes/{id}/send
Dispatch links via email/SMS/WA; return tracking IDs

POST /esign/verify
Verify OTP/identity; store KYC snapshot

GET /envelopes/{id}/status
Poll status; or subscribe to webhooks

GET /documents/{id}/download
Signed URL for PDF (short TTL)

POST /callbacks/esign
Receive status: sent/opened/signed/completed/declined

POST /documents/revoke
Revoke/expire links; issue new version

Sample Render Request

POST /documents/render
{
  "templateId":"POLICY-EPOLICY-v4",
  "policyNo":"POL-2025-001122",
  "locale":"en",
  "data": {"insuredName":"Jane Doe","sumInsured":250000000,"effective":"2025-08-14"},
  "options":{"watermark":"COPY","qrVerify":true,"hash":true}
}

Sample Envelope

POST /envelopes
{
  "documentId":"DOC-EPOLICY-77821",
  "signers":[
     {"role":"Proposer","name":"Jane Doe","email":"jane@example.com","method":"OTP"},
     {"role":"Agent","name":"Rama","email":"rama@example.com","method":"Drawn"}
  ],
  "routing":"sequential",
  "expiresInDays":7
}

Reference Flows

Issue & Sign

PAS calls /documents/render (e‑policy + invoice)
Create /envelopes → /envelopes/send
Signers complete; /callbacks/esign marks policy as active

Download & Verify

User downloads via signed URL
QR/URL points to verify endpoint with hash check
Access logged for audit

Version & Reissue

Template update → publish new version
Re‑render documents; revoke older links
Notify customers & archive prior versions

Embedded in Partner Apps

SSO to signer page; prefilled consent
Status callbacks update partner CRM
Documents mirrored to partner DMS if allowed

Security & Controls

mTLS, OAuth2/OIDC; short‑lived tokens; IP allow‑list; JWS request signing.
PDF tamper‑evident signatures; TSA timestamp; certificate chain validation.
PII encryption, redaction in logs; masked downloads via signed URLs.
OTP/2FA; knowledge‑based checks; device binding for high‑risk documents.
Watermarks, print restrictions, and link expiry; revocation endpoints.

Monitoring & Audit

End‑to‑end status: rendered → sent → opened → signed → completed.
Delivery analytics (email/SMS/WA): bounces, opens, clicks, retries.
Evidence file (PDF) with signature certs, IP/device, timestamps.
Change history for templates and published versions.

What You Get

OpenAPI, Postman, and mock signer environment.
Template pack (e‑policy/CoC/invoice) with merge fields.
Verification landing page & QR component with hash check.
Delivery connectors (email/SMS/WhatsApp) & sample texts.
Annual maintenance incl. change requests; on‑prem or cloud.