generated: '2026-07-19'
method: searched
source: https://www.lassie.co/om-oss
summary: >-
  Lassie publishes no API specification, so there are no API-level standards to
  assert (no OAuth/OIDC scheme, no RFC 9457 error format, no JSON:API or OData
  surface). What it does publish is a regulatory and consumer-protection posture
  typical of a supervised EU insurance distributor, captured here. No security
  certifications (SOC 2, ISO 27001, PCI DSS) are published anywhere on the
  Lassie estate - a trust center was probed for and does not exist.
standards:
  - id: eu-idd-2016-97
    name: EU Insurance Distribution Directive (Swedish implementation, lag 2018:1219)
    conforms: true
    evidence: >-
      "Lassie AB ar en forsakringsformedlare och star under Finansinspektionens
      tillsyn som distributor av forsakringar i enlighet med lag (2018:1219) om
      forsakringsdistribution." - published in the site footer.
    url: https://www.lassie.co/om-oss
  - id: finansinspektionen-supervision
    name: Swedish Financial Supervisory Authority supervision
    conforms: true
    evidence: >-
      Lassie AB states it operates under Finansinspektionen supervision as an
      insurance intermediary. Underwriting is carried out by Dina Forsakring AB.
    url: https://www.lassie.co/om-oss
  - id: eu-ipid
    name: Insurance Product Information Document (IPID)
    conforms: true
    evidence: >-
      Standardised IPID fact sheets published per tier (Brons / Silver / Guld)
      alongside pre-purchase information documents.
    url: https://docs.lassie.co/swe/latest/lassie-ipid-guld.pdf
  - id: gdpr
    name: General Data Protection Regulation
    conforms: true
    evidence: Published privacy policy and cookie policy with consent preferences.
    url: https://www.lassie.co/integritetspolicy
  - id: eu-whistleblower-directive
    name: EU Whistleblower Directive (2019/1937)
    conforms: true
    evidence: Dedicated whistleblowing reporting channel published.
    url: https://www.lassie.co/en/whistleblowing
  - id: eu-accessibility-act
    name: European Accessibility Act / web accessibility statement
    conforms: true
    evidence: Published accessibility statement for the Lassie web estate.
    url: https://www.lassie.co/en/accessibility
  - id: llmstxt
    name: llms.txt
    conforms: true
    evidence: >-
      A real llms.txt is served at /llms.txt on all three market hosts
      (www.lassie.co, de.lassie.co, fr.lassie.co) with content-type text/plain.
    url: https://www.lassie.co/llms.txt
  - id: oauth2
    conforms: false
    evidence: No public API and no published OAuth surface.
  - id: openid-connect
    conforms: false
    evidence: /.well-known/openid-configuration returns 404 on every host.
  - id: rfc9116-security-txt
    conforms: false
    evidence: /.well-known/security.txt returns 404 on every host.
  - id: rfc9457-problem-details
    conforms: false
    evidence: No published API specification.
certifications: []