Lassie Pet Insurance — API Integration & Open Insurance Data

Claims & Damage Report API

Lassie's AI-assisted claims pipeline — which now processes 90% of all claims with AI involvement and resolves 60% of German claims end-to-end in approximately six minutes — generates a machine-readable event trail per claim. Integration targets include claim ID, submission timestamp, claim category (illness, surgery, accident), uploaded vet bill metadata, AI decision flag, payout amount, and payment status. This stream is ideal for insurance accounting reconciliation, fraud signal pipelines, and automated audit logging.

Policy Details & Coverage Query

Each Lassie insurance customer holds a structured policy object: coverage package name, insured pet ID, policy start and end dates, annual deductible, premium amount, and the specific coverages selected (surgery, illness, liability, wellness add-ons, pre-existing condition riders). Integrating this object enables portfolio dashboards for enterprise pet care networks, vet clinic management platforms that need coverage verification before treatment, and insurer reinsurance data feeds.

Loyalty Points & Rewards Integration

Lassie's gamified rewards engine issues points for completing health challenges, passing quizzes, watching vet guides, meeting Tractive daily activity goals (10 points/active day), and linking partner services (1,000 points for Tractive connection). Points convert directly to premium discounts. Exposing the points balance and earning log via API enables synchronization with external loyalty ecosystems such as Lidl Plus — which Lassie already partners with — and cross-brand reward aggregation platforms.

Pet Health Profile Export

Each insured pet has a health profile containing species, breed, age, vaccination records, completed preventive guides, and historical vet consultation notes. This structured profile supports risk-scoring models for underwriting, veterinary practice management systems that need a pre-consultation health summary, and pet care analytics applications that track longitudinal health trends across populations. The vaccination reminder feature added in 2024 means vaccination dates are now consistently recorded and machine-readable.

Tractive GPS Activity Data Feed

Since the Tractive partnership launched in January 2025, Lassie users can link their GPS tracker and earn activity-based rewards. The resulting data includes daily active minutes, step counts, sleep duration, and location-derived movement patterns per pet. Integrating this feed into behavioral analytics platforms or dynamic pricing engines enables activity-adjusted premium calculations — the core proposition Lassie is commercializing as it scales across Europe with Series C capital.

Premium Payment & Payout History

Lassie automated its full payout and reconciliation pipeline using the Atlar API, completing integration in just four days — a testament to how cleanly structured its payment data already is. Our integration layer exposes incoming premium payments, refund events, and outgoing claim payouts as ledger entries with amount, currency (SEK, EUR), timestamp, and reference ID. This is the exact format required by accounting platforms for automated reconciliation and for insurer statutory reporting.

1. Authorization — Account Login & Token Acquisition

// Step 1: Initiate user session (OAuth 2.0 PKCE flow)
POST /auth/v1/session/init
Content-Type: application/json

{
  "client_id": "YOUR_CLIENT_ID",
  "redirect_uri": "https://yourapp.example/callback",
  "scope": "policy:read claims:read points:read health:read",
  "code_challenge": "<SHA256_CODE_CHALLENGE>",
  "code_challenge_method": "S256"
}

// Response: redirect URL with auth_code
// Step 2: Exchange auth_code for access + refresh tokens
POST /auth/v1/token
{
  "grant_type": "authorization_code",
  "code": "<AUTH_CODE>",
  "code_verifier": "<ORIGINAL_VERIFIER>",
  "client_id": "YOUR_CLIENT_ID"
}
// Response:
{
  "access_token": "eyJ...",
  "refresh_token": "rt_...",
  "expires_in": 3600,
  "token_type": "Bearer"
}

2. Policy & Claims Query

// Fetch active policy details for authenticated user
GET /api/v1/insurance/policies
Authorization: Bearer <ACCESS_TOKEN>
Accept: application/json

// Response:
{
  "policies": [{
    "policy_id": "LSE-SE-2024-00183442",
    "pet_id": "dog_buffy_7f3a",
    "coverage_tier": "premium",
    "annual_premium_eur": 312.00,
    "deductible_eur": 150.00,
    "covers": ["surgery","illness","liability","wellness"],
    "policy_start": "2024-03-01",
    "renewal_date": "2025-03-01",
    "status": "active"
  }]
}

// Fetch claims for this policy
GET /api/v1/claims?policy_id=LSE-SE-2024-00183442&from=2024-01-01
Authorization: Bearer <ACCESS_TOKEN>

// Response:
{
  "claims": [{
    "claim_id": "CLM-2024-00092381",
    "submitted_at": "2024-09-14T11:23:00Z",
    "category": "illness",
    "vet_invoice_eur": 480.00,
    "deductible_applied_eur": 150.00,
    "payout_eur": 330.00,
    "ai_processed": true,
    "processing_minutes": 5.8,
    "status": "paid",
    "paid_at": "2024-09-14T11:29:00Z"
  }]
}

3. Loyalty Points & Webhook Registration

// Read loyalty points balance + recent earning events
GET /api/v1/rewards/points
Authorization: Bearer <ACCESS_TOKEN>

// Response:
{
  "balance": 4820,
  "discount_pct": 8.5,
  "events": [
    { "date": "2025-03-01", "source": "tractive_activity",
      "points": 10, "pet_id": "dog_buffy_7f3a" },
    { "date": "2025-02-28", "source": "health_quiz_completed",
      "points": 50, "quiz_id": "flea-prevention-101" }
  ]
}

// Register webhook for claim payout events
POST /api/v1/webhooks
Authorization: Bearer <ACCESS_TOKEN>
Content-Type: application/json

{
  "url": "https://yourapp.example/hooks/lassie-claims",
  "events": ["claim.paid", "claim.rejected", "claim.processing"],
  "secret": "whs_<YOUR_SIGNING_SECRET>"
}

// Incoming webhook payload (claim.paid event):
{
  "event": "claim.paid",
  "claim_id": "CLM-2025-00043921",
  "policy_id": "LSE-DE-2024-00293811",
  "payout_eur": 212.50,
  "paid_at": "2025-03-02T09:14:33Z",
  "currency": "EUR"
}
// Verify HMAC-SHA256 signature in X-Lassie-Signature header

GDPR — General Data Protection Regulation

Lassie operates as data controller under the EU General Data Protection Regulation (GDPR) across all its markets — Sweden, Germany, and France. Any API integration that touches personal data (pet owner identity, pet health records, location data from Tractive) must operate under explicit user consent, data-processing agreements (DPAs), and the data minimization principle. Our deliverables include GDPR-aligned consent collection flows, DPA templates, and field-level documentation identifying which data fields are personal versus aggregate.

Solvency II & Insurance Regulatory Compliance

As a licensed insurer across multiple EU jurisdictions and supervised by the Swedish Financial Supervisory Authority (Finansinspektionen), Lassie's data is subject to Solvency II pillar III reporting requirements for insurance transparency and risk data. Integrations that surface policy exposure, claims frequency, or payout data for reinsurance or actuarial purposes must maintain audit trails, access logs, and data retention schedules consistent with Solvency II obligations. Our compliance guidance covers access log retention (minimum 5 years), encryption standards (TLS 1.3 in transit, AES-256 at rest), and rate-limiting patterns that prevent bulk extractions in violation of terms.

Open Insurance Framework & Data Authorization

The European Insurance and Occupational Pensions Authority (EIOPA) has been developing Open Insurance frameworks analogous to PSD2 for banking. While not yet mandated, forward-looking insurers including Lassie are structuring their APIs with RESTful design, OAuth 2.0 authentication, and webhook-based event notification — the same primitives as Open Banking. Our integration approach aligns with these emerging standards, ensuring the implementations we deliver will remain architecturally compatible as Open Insurance regulations mature across Sweden, Germany, and France in coming years.

About Our Studio

We are an independent technical integration studio specializing in mobile app protocol analysis and authorized API integration across fintech, insurtech, and digital commerce. Our engineers have hands-on experience with insurance data pipelines, payment gateway integrations, and OpenBanking/OpenInsurance API design across European and global markets. We understand GDPR data-processing obligations, Solvency II reporting requirements, and the OAuth 2.0 flows that modern insurtechs like Lassie use — and we ship end-to-end integration source code under these constraints.

• Insurance, fintech, and pet care data platforms across Sweden, Germany, France, UK
• Protocol analysis, OAuth flow documentation, and endpoint reverse engineering
• Custom Python / Node.js / Go SDKs, webhook handlers, and reconciliation scripts
• Full pipeline: analysis → build → test → compliance review → documentation
• Source code delivery from $300 — runnable API source code + full documentation; pay after delivery upon satisfaction
• Pay-per-call API billing — access our hosted endpoint and pay only per call; no upfront fee, ideal for usage-based teams

Contact Us

Provide the target app name and your integration requirements — we'll scope the project and deliver a timeline and quote within one business day.

Open contact page

Engagement Workflow

1. Scope confirmation: you specify which data types and integration scenarios matter (e.g. claims webhook + policy query + points sync).
2. Protocol analysis and API design — 2–4 business days depending on scope.
3. Source code build and internal validation — 3–7 business days.
4. Documentation, test cases, and compliance notes — 1–2 business days.
5. Typical first delivery: 6–13 business days. Third-party approval cycles (e.g. Tractive data agreements) may extend timelines.

Deliverables Checklist

• OpenAPI / Swagger specification for all integrated endpoints
• Auth flow documentation (OAuth 2.0 PKCE, token refresh, scope mapping)
• Runnable source code: login, policy query, claims extraction, points read, webhook handler
• Data schema map: Lassie fields → your target schema (PostgreSQL / BigQuery)
• GDPR data field classification and DPA template guidance
• Automated test suite and mock response fixtures
• README with setup, environment variables, and deployment notes