The coverage gap most clubs miss

Your insurance policy covers less than you think.

Every cyber insurance policy has a compliance clause. If your club can't show current, documented security policies, your insurer can cut your payout after a breach — regardless of your coverage limit. ComplianceWire closes that gap.

Free basic assessment · about 10 minutes · sign in with Microsoft or Google

Your result
Basic Security Assessment
B
Access control72%
Data protection85%
Vendor risk48%
3 gaps your insurer would flag — with a prioritised fix list.
The coverage gap
Your $2,000,000 policy a $200,000 payout.

Cyber policies let insurers reduce payouts when security controls can't be proven. Clubs with complete, current documentation recover more. Clubs with gaps recover less — sometimes far less.

Why this matters for your club

Private clubs carry more risk than they realise.

Member credit cards, home addresses, family details. Vendors in your systems. Seasonal staff rotating through. A board that may not see a compliance gap until a claim is denied.

Governance risk

Board members can be held personally liable

When a breach leads to litigation, directors are named alongside the club. Documented governance is how you show due diligence.

Member data exposure

You hold more member data than you think

Credit cards, SSNs from background checks, home addresses, dining and medical notes — usually with no written policy governing it.

Access control gap

Seasonal staff are your biggest vulnerability

Summer hires get access and leave by September. Without offboarding and device policies, old credentials linger.

Vendor chain risk

Every vendor integration is an open door

Tee-time platform, POS, event software, payment processor — if you've never sent a security questionnaire, you don't know their controls.

AI governance gap

AI is already in your club. Governed or not.

Staff paste club data into public AI tools every day. Without a written AI-use policy, there's no rule for what's allowed.

Size is not protection

"We're too small to be a target"

Attackers automate. The instruction is simply to probe everyone and come back with victims — your member data is the prize.

Start here — no commitment

See exactly where your club stands.

1

Sign in with Microsoft or Google

No new account, no new password. Uses credentials your team already has.

2

Answer 10 minutes of guided questions

About your environment — remote access, backups, staff, vendors. Plain language throughout.

3

Get your grade and your roadmap

A score by category and a prioritised list of what to fix first. Take it to your board or your insurer.

Security & privacy

A platform you can trust with the details that matter.

Nothing logged, nothing stored

AI traffic routes through AWS Bedrock to Anthropic. Every token is dropped after the response.

Sign in with what you already have

Use your existing Microsoft or Google account. No new credentials to manage.

Built by certified professionals

Developed by practitioners holding CISSP, OSCP, OSWE, and OSCE — not a feature bolted on.

Standards that stay current

NIST, CISA, PCI DSS, and insurer standards update in the background — no tracking on your part.

Ready to see where your club stands?

The free basic assessment takes about 10 minutes. Get a graded score by category and a prioritised action list the moment you finish.

Start the demo
Provided through Jonas Software.