

The Client
GetInsured is a leading Health Insurance Exchange (HIX) Platform. It offers a SaaS-based full-service Exchange that powers the best health insurance e-commerce experience for consumers, employers and insurers. Their solutions for employers, benefits consultants, and health insurers deliver a brilliant consumer experience, deepen engagement with end-users, and help to better control their healthcare costs.
GetInsured’s consumers can personalize their shopping experience based on their specific health needs. Each year, millions of Americans use the company’s tools to enroll in their choice of health insurance plans.
The Challenge
GetInsured faced compliance, cost, and scalability challenges with its third-party co-location vendor. They needed a cloud solution that met specific compliance standards and ensured security, automation, and dynamic scaling. The migration had to be completed before Open Enrollment with minimal downtime and a strict 2-hour Recovery Time Objective (RTO).
Compliance Standards Mandate
The platform must meet MARS-E 2.0 and FedRAMP standards, requiring a secure, compliant cloud environment to ensure data privacy and security for insurance exchanges.
Co-Location Challenges
The existing third-party co-location vendor failed to provide a compliant hosting platform, increasing costs and operational complexities for GetInsured.
Cloud Migration Need
GetInsured required a compliant cloud solution with automated deployments across multiple environments to meet security and audit requirements.
Scalability and Cost
The new platform needed to scale dynamically based on resource utilization while optimizing costs compared to the high upfront expenses of co-location.
Time-Sensitive Migration
Migration had to be completed before Open Enrollment with minimal downtime and a strict Recovery Time Objective (RTO) of 2 hours.
Xoriant Solution | Key Contributions
GetInsured partnered with Xoriant, a long-term technology partner since 2005, to execute the migration within a strict timeline. Xoriant has been instrumental in developing, supporting, and enhancing GetInsured’s Health Insurance Exchange Platform, which follows modern architectural principles and Affordable Care Act guidelines. The solution ensured regulatory adherence, seamless scalability, and cost optimization while maintaining a strict migration timeline.
Key solution we implemented included:
- Cloud Provider Evaluation: GetInsured and Xoriant evaluated multiple cloud platforms based on compliance, security, ease of migration, and total cost of ownership. AWS GovCloud was selected for its built-in regulatory compliance, scalability, and ability to meet FedRAMP and MARS-E 2.0 requirements.
- API Management & Load Balancing: AWS API Gateway (APIG) was implemented to create front-end interfaces for applications interacting with service providers. AWS Elastic Load Balancer (ELB) was used to distribute incoming traffic efficiently across multiple targets, ensuring high availability and performance.
- Cost-Effective Performance Scaling: AWS Lambda services were introduced to reduce operational costs by running code only when needed. Additionally, AWS-RDS was provisioned to enable automatic scaling of database resources, ensuring efficient resource utilization based on demand fluctuations.
- Hybrid Migration Strategy: To minimize risk and downtime, a hybrid migration approach was used. The database was first replicated in read-only mode before being switched to read-write mode during the final cutover. This approach ensured the migration was completed within the mandated two-hour Recovery Time Objective (RTO).
- Enhanced Security & Compliance Controls: Xoriant implemented robust security measures, including API-key validation, an authorization layer using header validation, IP whitelisting, a default-deny policy, and encryption at rest for RDS instances. These measures ensured compliance with ACA, FedRAMP, and MARS-E 2.0 security standards.
- Automated Deployment & Infrastructure Management: AWS CLI scripts and Infrastructure-as-Code (IaaC) methodologies were leveraged to automate environment provisioning, ensuring consistency, reliability, and efficiency across Dev, QA, and Production environments.
Business Benefits
By leveraging an agile migration strategy and modernizing applications with rigorous performance testing, the client achieved a seamless transition to a scalable, secure, and cost-effective cloud platform.
Key benefits included:
Reduced TCO
AWS-based deployment lowered upfront costs compared to co-location and optimized scale-out, reducing total cost of ownership based on seasonal service demands.
Dynamic Scaling
APIG enabled seamless integration with changing service providers, while utilization triggers allowed dynamic scaling to meet demand.
Simplified Migration
A standardized design template streamlined provisioning and scaling for Dev, QA, and Production environments.
This transformation positioned the client for sustained growth while maintaining compliance and high performance.