Federal cybersecurity contractor
Someone experienced with USPS or federal supplier security requirements who can help translate AS-805-I into an implementation and evidence plan.
Private update
Prepared for Marty
A respectful request for your perspective on whether Belpointe might be open to offering institutional guidance, including how best to approach insurance through Belpointe’s resources or my existing Howden Global relationship.
Marty,
I wanted to give you a straightforward update on where MovementAI stands and ask whether Belpointe could publicly serve as an advisor to MovementAI. I believe Belpointe’s involvement may provide the trust and institutional credibility USPS needs to see before our first Building Brain pilot can move forward.
We have worked our way through the USPS conversation in Florida and are now at what I understand to be the final local gatekeeper for a pilot at the Largo Post Office. USPS was the first organization to say yes to the concept. We do not have a signed pilot agreement yet, so I am treating this as serious interest pending the authorized contracting, security, data and insurance reviews.
The proposed pilot is intentionally limited. For eight weeks, MovementAI would use only approved operating information to help the branch identify late-arriving volume, route-readiness pressure and manpower gaps earlier. Existing USPS systems would remain in place. Recommendations would be reviewed by people, not executed autonomously. Quotron could provide a physical display for approved status messages, but only after its security, permissions and offline behavior are accepted.
MovementAI does not currently carry the insurance coverage that a federal operating environment is likely to require. Before we can sign or begin work, we may need to put the appropriate policies in place for a technology vendor with potential access to operational data and an occupied facility.
My direct question is whether it would be feasible for Belpointe to come on publicly as an advisor to MovementAI, with the title, scope, responsibilities, approvals and other specifics worked out together before anything is announced. As part of that discussion, I would like your guidance on whether the insurance path should run through capabilities available within Belpointe or its trusted partners, through my established contact at Howden Global Group, or through a coordinated approach.
What we need to solve
USPS may require MovementAI to demonstrate a supportable cybersecurity program before sensitive systems or operational data is transferred. At the same time, USPS’s published supplier clauses require workers’ compensation, employers’ liability, general liability, automobile coverage, proof before work begins and, when applicable, errors and omissions. Those published figures are only a floor; the final contract schedule can require more. We should not buy coverage blindly before receiving the actual USPS insurance schedule or understanding the security controls, independent testing and cyber liability requirements that will apply.
Likely $1M/$2M minimum; prepare to quote $2M/$4M
Statutory, with $1M employers’ liability
$1M, including hired and non-owned vehicles
Prepare a $5M option
Prepare a $5M option for software, analytics and integration risk
Prepare a $5M option for data, security and incident-response risk
Whichever path you recommend, the broker must review additional-insured status, primary and noncontributory wording, waiver of subrogation, cancellation notice, subcontractor requirements, claims-made continuity and policy exclusions. The final USPS agreement, not this planning estimate, will control.
A major USPS pain point
USPS may be turning over sensitive systems and operational data to MovementAI. Our CTO has strong cybersecurity expertise, but internal capability alone may not be enough to satisfy USPS procurement, security review and insurance underwriting. We need an independently supportable security program and insurance structure before accepting production data.
Marty, you may have a useful perspective on how seriously the Postal Service and federal government treat this risk, even if cybersecurity is not part of your network. If you happen to know a qualified contractor, cybersecurity firm, insurance professional or someone who could make an introduction, that would be helpful, but there is no assumption that you do.
Someone experienced with USPS or federal supplier security requirements who can help translate AS-805-I into an implementation and evidence plan.
A qualified firm for architecture review, penetration testing, monthly vulnerability scanning and documentation that can be produced during a USPS assessment.
A broker or advisor who can coordinate cyber liability and Technology E&O coverage with the actual USPS contract, data exposure and incident-response obligations.
The question for Marty
How important do you believe this will be to the Postal Service and federal government? If anyone qualified comes to mind, an introduction would be appreciated. Your guidance would also help determine which of these needs Belpointe may be positioned to support directly or through trusted relationships. Either way, the final controls, limits and contract language must be confirmed with USPS, counsel and the selected insurer.
What the advisory relationship could unlock
Marty, the public record suggests Belpointe may have the experience and relationships to advise MovementAI on more than potential access to Aster & Links and VIV. If the overall advisory concept is feasible, I would appreciate your guidance on which capabilities are truly available inside Belpointe, which come through trusted partners and who, if anyone, you would want involved, including whether insurance should begin there or through my Howden Global contact.
Belpointe publicly identifies insurance among its lines of business, and its asset-management platform says it can facilitate corporate insurance solutions. You may prefer to involve people already inside your organization or trusted network before I formally engage Howden.
Belpointe identifies legal services as an internal discipline. Its corporate operations leadership also covers legal, product development and firm strategy. That experience could help us recognize indemnity, data, liability and vendor-contract issues before USPS counsel raises them.
Belpointe has development, construction management, property management and asset management in house. Those teams already understand occupied-building access, contractor insurance, vendor onboarding, incident reporting and system-data approvals.
Belpointe’s family-office ecosystem includes risk management and corporate consulting. That may help us structure MovementAI as an institutionally prepared company, not only prepare two properties for a pilot.
Research basis: Belpointe family of companies, Belpointe OZ overview, and Belpointe Asset Management. These sites describe capabilities generally; I am relying on you to tell me which Belpointe entity and people, if any, are appropriate.
What I need from you
Would it be feasible for Belpointe to come on publicly as an advisor to MovementAI? I am not asking us to decide every term now. I am asking whether the concept is workable so we can discuss the right role, scope, responsibilities, approvals and structure.
If it is feasible, may I tell USPS that Belpointe is advising MovementAI once we have agreed on the exact public wording? Nothing would be announced or represented without your approval and the approval of the appropriate Belpointe entity.
I already have a well-established relationship at Howden Global Group. Would you prefer that I use that relationship for insurance, or involve insurance and risk people inside Belpointe, or others you know and trust, before I formally engage Howden?
I have already met the Belpointe multifamily lead through your introduction and have reached out, but we have not connected yet. If USPS asks whether it would be the first pilot, may I say only that Belpointe is also willing, in principle and subject to its own approvals, to evaluate MovementAI at Aster & Links and VIV?