# Wawanesa Insurance

> The Wawanesa Mutual Insurance Company (founded 1896, Wawanesa, Manitoba; headquartered in Winnipeg) is one of Canada's largest property and casualty mutual insurers, writing auto, home, condo, tenant, seasonal residence, farm and commercial lines across every province and territory through a 100% independent broker distribution model, alongside Wawanesa Life. Wawanesa runs policy, claims and billing on Guidewire InsuranceSuite. It operates a real broker-facing API programme standardized on CSIO — including a CSIO-aligned Commercial Small Business quote-and-bind API — but **none of it is public**: there is no developer portal, no API reference, no OpenAPI definition, no SDK, no sandbox and no self-serve signup. Integration is partner-gated through the broker channel.

**Generated by the API Evangelist enrichment pipeline on 2026-07-25. Method: generated from apis.yml, review.yml and the artifacts in this repository. Nothing below is synthesized — every claim links to a source.**

## Access posture

- **No public API.** `api.wawanesa.com` exists but returns HTTP 403 (nginx) at the root and for every path probed, including `/openapi.json`, `/swagger.json`, `/api-docs` and `/.well-known/*`. Only `/health` answers (plain-text `OK`).
- **No developer host.** `developer.wawanesa.com`, `developers.wawanesa.com` and `docs.wawanesa.com` do not resolve (no DNS).
- **No soft-404 traps.** `www.wawanesa.com` returns HTTP 200 with the site's catch-all HTML shell for any unknown path — including `/llms.txt`, `/.well-known/security.txt` and `/.well-known/api-catalog`. Those are not real documents.
- **Onboarding is human.** The only stated integration path is "contact your Wawanesa Business Development representative". There is no self-serve signup, no API key, and no documented machine-to-machine credential.
- **No GitHub organization**, no published SDK on npm / PyPI / RubyGems / NuGet / Packagist / crates.io, no public Postman workspace, no status page, no webhook or event catalog, no GraphQL, no gRPC, no MCP server.

## APIs

- [Wawanesa Commercial Small Business API](https://www.wawanesa.com/canada/news/wawanesa-improves-insurance-quotes-for-small-businesses): Announced 2022-03-30, built with HUB International, "fully aligned with CSIO data standards". Real-time risk rating, quoting and binding for Business & Professional Services, Retail Services and Contractors. No public reference, no base URL, no definition. Broker-gated.

## Published API inventory (third-party, member-gated definitions)

Wawanesa contributed nine API packages to CSIO's [Reusable Services Library](https://csio.com/standards-testing-tools/reusable-services-library) so other Canadian carriers and Broker Management System vendors could reuse them. The names and dates are public; the definitions are downloadable only by CSIO members.

- Quote API (2021-10-13)
- New Business API (2021-10-13)
- Policy Inquiry API (2021-10-13)
- Policy Update List API (2021-10-13)
- Policy Cancellation API (2021-10-13)
- Risk Appetite API (2021-10-13)
- Required Fields API (2021-10-13)
- Billing Inquiry API (2021-02-10)
- eDocs API (2021-02-10)

## Standards and certifications

Canada's insurance connectivity standards body is **CSIO**, not ACORD — Wawanesa's own site search returns no results for "ACORD".

- [CSIO API Security Standards Certification](https://csio.com/news/wawanesa-insurance-achieves-api-security-standards-certification-safeguarding-data-and) (2024-10-29) — a standard authentication and authorization API model.
- [CSIO JSON API Standards Certification, Billing](https://csio.com/news/wawanesa-insurance-first-insurer-achieve-csios-json-api-standards-certification) (2025-02-05) — **first CSIO member certified**.
- [CSIO eDocs Standards Certification](https://csio.com/news/csio-applauds-wawanesa-insurance-achieving-csios-edocs-certification) (2025-01-13, updated standards; personal lines 2014, commercial lines 2020-10-21).
- [CSIO Claims eDocs Certification Phase 1](https://csio.com/news/wawanesa-mutual-insurance-company-becomes-first-insurer-attain-csio-claims-edocs-certification) (2022-04-04) — **first insurer**.
- [CSIO My Proof of Insurance](https://csio.com/news/wawanesa-goes-paperless-csios-my-proof-insurance-solution) (national rollout 2020-11-29).
- [IBAC Data Exchange / DX Connect](https://www.wawanesa.com/canada/news/wawanesa-furthers-commitment-to-brokers-with-new-broker-platform) (2022-03-28) participant.

## Authentication

The only authentication metadata reachable anonymously is the identity layer in front of the gated Broker Platform. It governs broker sign-in, not any insurance API.

- [Okta broker issuer OIDC discovery](https://login.brokerplatform.wawanesa.com/.well-known/openid-configuration) — authorization_code / implicit / refresh_token / password / device_code, PKCE S256, DPoP algs advertised, 7 stock OIDC scopes.
- [Okta org authorization-server metadata (RFC 8414)](https://login.brokerplatform.wawanesa.com/.well-known/oauth-authorization-server) — 83 scopes, all Okta platform-management scopes.
- [Salesforce Experience Cloud OIDC discovery](https://brokerplatform.wawanesa.com/.well-known/openid-configuration) — 36 stock Salesforce platform scopes.

No insurance-business scope vocabulary (quote, bind, policy, billing, claims) is published anywhere.

## Artifacts in this repository

- apis.yml — the APIs.json index for Wawanesa
- review.yml — the API Evangelist provider review and probe log
- authentication/wawanesa-authentication.yml — auth profile harvested from live discovery documents
- scopes/wawanesa-scopes.yml — every scope advertised by the broker identity providers, grouped and labelled
- conformance/wawanesa-conformance.yml — CSIO certifications, standards posture, and the RDSL package inventory
- well-known/wawanesa-well-known.yml — the /.well-known probe index (+ three saved discovery documents)
- security/wawanesa-domain-security.yml — TLS / HSTS / DNSSEC / CAA / SPF / DMARC probe results

## Human surfaces

- [Wawanesa Canada](https://www.wawanesa.com/canada/)
- [Broker Platform (gated)](https://brokerplatform.wawanesa.com/)
- [Broker Platform login (Okta)](https://login.brokerplatform.wawanesa.com/)
- [Member Centre (policyholders, gated)](https://membercentre.wawanesa.com/)
- [News](https://www.wawanesa.com/canada/news/)
- [Blog](https://www.wawanesa.com/canada/blog/)
- [Contact / inquiries](https://www.wawanesa.com/canada/contact-us/inquiries-and-feedback.html)
- [Privacy](https://www.wawanesa.com/canada/pip/about-privacy.html)
- [Terms and conditions](https://www.wawanesa.com/canada/pip/terms-and-conditions.html)