# Cincinnati Financial Corporation

> Cincinnati Financial Corporation (NASDAQ: CINF) is a property and casualty insurance holding
> company headquartered in Fairfield, Ohio. Its subsidiaries — The Cincinnati Insurance Company,
> The Cincinnati Indemnity Company, The Cincinnati Casualty Company, The Cincinnati Specialty
> Underwriters Insurance Company and The Cincinnati Life Insurance Company — market business,
> home, auto and life insurance plus fixed annuities exclusively through a network of independent
> insurance agencies. Cincinnati Insurance operates an API program for integration partners, but
> it is not a public one: there is no developer portal, no published reference and no
> machine-readable contract.

This file is generated by API Evangelist from the public surface of cinfin.com. It is not
published by Cincinnati Financial. Everything below was fetched; nothing was inferred.

## What the API program is

Cincinnati Insurance publishes an API Terms and Conditions Agreement that licenses "the Cincinnati
Insurance APIs" to a "Provider" — an integrator or vendor building an application against them.
The agreement is real, current and specific, but it is a legal instrument only. It names no
protocol, endpoint, authentication scheme, media type or industry standard. The technical terms
for each API live in per-API "API Policy(ies)" that the agreement incorporates by reference and
that Cincinnati does not publish.

- [API Terms & Conditions acceptance form](https://www.cinfin.com/legal/api-terms-conditions-acceptance): the entry point. Full name, email, title, organization, reCAPTCHA. On submit: "Your submission has been received. We'll be in contact with you shortly."
- [API Terms and Conditions Agreement (PDF)](https://edge.sitecorecloud.io/cincinna-x33xq9h6/media/Project/Cincinnati-Financial/CinFin/Files/api-terms-conditions.pdf): the licence itself.

Two clauses are worth knowing before you plan an integration:

- **No fee, for now.** Section 6: "Cincinnati Insurance does not currently charge a fee for accessing or using our APIs; however, Cincinnati Insurance may do so in the future."
- **No AI training on Cincinnati data without written consent.** Section 4(h) forbids a Provider from using Cincinnati Insurance Confidential Information "to train or uptrain any machine learning, neural network, deep learning (including large language models), predictive analytics, or other artificial intelligence" and requires prior written consent — including a description of the data, the tool, every processing location, and the purpose — before any AI tool touches it. Section 4(i) separately forbids deriving pricing indications, pricing models or rate analysis from claims data.

## What is not published

- No OpenAPI, Swagger, GraphQL SDL, AsyncAPI, WSDL or .proto at any anonymous URL.
- No developer portal, API reference, getting-started guide, changelog, status page, SDK, CLI or Postman collection.
- No OAuth or OpenID Connect discovery document on any cinfin.com host.
- No rate limits, quotas or plans. The agreement forbids exceeding limits it never states.
- No ACORD, AL3, CSIO, CIECA BMS, NGDS or other P&C domain-standard declaration.
- No `/llms.txt` of Cincinnati's own; `https://www.cinfin.com/llms.txt` returns 404.

## Security and disclosure

- [security.txt](https://www.cinfin.com/.well-known/security.txt): served at HTTP 200, one line — `Contact: mailto:bugbounty@cinfin.com`. No Expires, Policy or Encryption field, so it is below RFC 9116 minimums. Note that robots.txt also carries `Disallow: /.well-known/`.
- Domain posture (probed): TLS 1.3, HSTS with a one-year max-age and preload, DNSSEC signed, CAA restricted to DigiCert / Amazon / Amazon Trust / Let's Encrypt, SPF present, DMARC at `p=reject`.

## Human surfaces

- [Cincinnati Insurance](https://www.cinfin.com/)
- [About](https://www.cinfin.com/about-us)
- [Find an independent agent](https://www.cinfin.com/cincinnati-insurance-agents)
- [Policyholder online services](https://onlineservice.cinfin.com/b2c/Account_Self_Service/Login.aspx)
- [CinciLink agent portal](https://cincilink.cinfin.com/) — IBM Security Verify Access B2B login; 302s anonymously
- [Mobile apps](https://www.cinfin.com/mobile)
- [Claims](https://www.cinfin.com/contact-us/claims)
- [Online services support](https://www.cinfin.com/contact-us/online-services-support)
- [FAQ](https://www.cinfin.com/contact-us/faq)
- [Resources / blog](https://blog.cinfin.com/)
- [Investors](https://www.cinfin.com/investors)
- [Terms & Conditions](https://www.cinfin.com/legal-footer/terms-conditions)
- [Privacy Policy](https://www.cinfin.com/legal-footer/privacy-policy)
- [Contact](https://www.cinfin.com/contact-us)

## How to get access

Submit the acceptance form and wait to be contacted. There is no self-serve path, no sandbox and
no key issuance you can complete unattended. An agent cannot onboard here.