# By Miles

> By Miles was a London-based insurtech that pioneered pay-by-mile motor insurance in the United Kingdom, founded in 2016 and launched in 2017 for low-mileage drivers covering under roughly 7,000 miles a year. Premiums were a fixed annual charge for the parked car plus a per-mile rate for distance actually driven, measured by the OBD-II "Miles Tracker" dongle or, on trackerless "connect" policies, by pulling odometer data from a linked Tesla, Ford or Mercedes-Benz connected-car account. By Miles was acquired by Direct Line Group in April 2023 and is being wound down under Aviva ownership.

## Important context for agents

- **By Miles publishes no public API.** There is no developer portal, no reference documentation, no OpenAPI or Swagger document, no GraphQL endpoint, no gRPC service, no webhook catalogue, no AsyncAPI, no SDKs, no CLI and no public Postman collection. Every candidate path was probed on 2026-07-25 and none resolved.
- `api.bymiles.co.uk` is a **private AWS API Gateway** serving the By Miles consumer mobile app. It returns `403 {"message":"Forbidden"}` with `x-amzn-errortype: ForbiddenException` anonymously on every path. Do not treat it as an integration surface.
- `docs.bymiles.co.uk` is a **CloudFront signed-URL distribution for private policy documents**, not API documentation. It returns 403 `MissingKey`.
- By Miles is an API **consumer**, not a producer: it was the first UK insurtech directly FCA-authorised as an AISP/PISP under Open Banking (January 2020) and it consumes OEM connected-car APIs for mileage.
- **The brand is winding down.** New-customer quotes stopped 26 November 2025; renewal quotes stopped 6 January 2026. Existing policies run to expiry.
- The only partner integration mechanism is the email address partnerships@bymiles.co.uk.

## APIs

There are no public By Miles APIs to list.

## Company

- [Website](https://www.bymiles.co.uk/): Product marketing site, carrying the wind-down banner.
- [Partners](https://www.bymiles.co.uk/partners): Press and partnership marketing page; integration path is partnerships@bymiles.co.uk.
- [Help centre](https://help.bymiles.co.uk/hc/en-us): Zendesk consumer support — Miles Tracker setup, connecting a Tesla/Ford account, claims.
- [2026 company update](https://help.bymiles.co.uk/hc/en-us/articles/31682833887517-By-Miles-2026-Company-Update): The wind-down announcement and FAQ.
- [Magazine](https://www.bymiles.co.uk/insure/magazine/): Consumer blog.
- [Press](https://www.bymiles.co.uk/press): Press pack.
- [Careers](https://www.bymiles.co.uk/careers): Careers page.
- [GitHub organisation](https://github.com/by-miles): Real engineering org, but public repos are hiring exercises and CI tooling only — no specifications, SDKs or client libraries.
- [Customer dashboard login](https://dashboard.bymiles.co.uk/account/login): Member web dashboard.

## Security and compliance

- [Security vulnerability reporting policy](https://www.bymiles.co.uk/security-vulnerability-reporting-policy): Responsible disclosure to vulnerability@bymiles.co.uk, PGP-encrypted reports preferred, 5-day response target, hall of fame and discretionary cash awards.
- [PGP public key](https://www.bymiles.co.uk/static/bymilesvulnerabilitypgp.asc): For encrypted vulnerability reports.
- [Information security policy](https://www.bymiles.co.uk/information-security): ISMS policy v2.1 (20 May 2026), aligned to the scope of ISO 27001, with internal and external annual audits. Alignment, not a published certificate.
- [Privacy notice](https://www.bymiles.co.uk/privacy-notice): UK GDPR, Data Protection Act 2018 and PECR.
- [Terms of business](https://www.bymiles.co.uk/terms-of-business): FCA-regulated insurance intermediary, Firm Reference Number 773046.
- [Terms of use](https://www.bymiles.co.uk/terms): Site and app terms.
- [Cookie policy](https://www.bymiles.co.uk/cookies)

## Artifacts in this record

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/by-miles/refs/heads/main/apis.yml): The APIs.json record.
- [review.yml](https://raw.githubusercontent.com/api-evangelist/by-miles/refs/heads/main/review.yml): Full probe log and the no-public-API finding.
- [Vulnerability disclosure](https://raw.githubusercontent.com/api-evangelist/by-miles/refs/heads/main/security/by-miles-vulnerability-disclosure.yml)
- [Domain security](https://raw.githubusercontent.com/api-evangelist/by-miles/refs/heads/main/security/by-miles-domain-security.yml)
- [Conformance](https://raw.githubusercontent.com/api-evangelist/by-miles/refs/heads/main/conformance/by-miles-conformance.yml)
- [Lifecycle](https://raw.githubusercontent.com/api-evangelist/by-miles/refs/heads/main/lifecycle/by-miles-lifecycle.yml)
- [Well-known probe](https://raw.githubusercontent.com/api-evangelist/by-miles/refs/heads/main/well-known/by-miles-well-known.yml)