Licensing generally attaches to the activity, meaning negotiating, soliciting, or representing a party in a transaction for compensation, and the definition of those activities is set state by state. A contractor configuring software and writing template copy is usually working on your behalf under your name, and you are the one soliciting. Where it gets less clear is if that person starts answering replies and talking to sellers about price, because at that point they may be doing something that looks like the licensed activity in your state. That's a question for a real estate attorney in your state rather than something to settle from a forum.
The two rules that bite people on the messaging side have nothing to do with real estate licensing. Automated texting and calling are governed by federal telemarketing rules and a set of state mini-statutes, and the consequences land on you as the sender. So before anything goes live, get in writing from the consultant how consent is recorded on each record, how opt-outs are captured, and whether the sending numbers are registered with the carriers. Confirm the current requirements with counsel, because this area moves.
On access, the practical protections are contractual rather than insurance-based. A short agreement covering confidentiality, who owns the account and the data, and what happens to logins when the engagement ends does more for you than a policy would. Ask whether they carry professional liability, sometimes called errors and omissions, and also give them their own user seat rather than your password, so you can cut access in one click when the work is done.
