AxiLayer AI crestAxiLayerAI™
AxiLayer AI Assurance Intelligence · Insurance-Ready AI

The Evidence Your Insurer Will Ask For

Insurers are starting to exclude AI from standard policies and to cover it affirmatively only when they can see how it is governed. AxiLayer AI turns your AI governance into signed, current evidence an underwriter can read.

$25M
Limits on Lloyd’s-backed AI liability policies
$4.8B
Projected AI insurance premiums by 2032 (Deloitte)
15
Questions underwriters ask about AI, answered
12
Questions in the free readiness Quick Check
3 min
To see your score and gaps

Last verified: 23 October 2026

What changed

AI is now an underwriting question

Most AI risk has been covered silently under existing policies. That is changing fast: some standard policies now exclude AI outright, specialist insurers offer affirmative AI cover only after they see evidence, and new certification schemes for AI agents are being paired with insurance.

Exclusions are arriving
Some standard commercial policies now carry absolute AI exclusions, so an AI failure may not be covered unless AI is addressed explicitly.
Affirmative AI cover needs evidence
Specialist AI liability policies, including Lloyd’s-backed products with limits up to $25 million, cover model errors, hallucinations and agent failures, after the insurer understands the AI.
Certification meets cover
Agent-focused standards now link certification to insurance of up to $50 million, and Deloitte projects AI insurance premiums could reach $4.8 billion by 2032.
The underwriter’s questions

What insurers ask, and the evidence that answers it

These are the questions brokers and underwriters increasingly ask about AI, from E&O and cyber to D&O and specialist AI liability, and the evidence AxiLayer AI produces for each.

What the insurer asksThe evidence AxiLayer AI provides
Do you have a complete inventory of the AI systems you build, buy and use?An AI inventory with owners, purpose, vendor, data and risk tier, including tools teams adopted on their own.
Which AI systems make or influence decisions about customers, patients, employees or money?A risk classification of each system against the rules that apply in each market, with the high-impact systems flagged.
How do you test AI systems before release and after each change?Test plans and results for accuracy, robustness and error rates, re-run after every model or data change.
How do you check for bias and unfair outcomes?Bias and fairness testing across relevant groups, with thresholds, results and remediation records.
Who can override or stop an AI system, and how fast?Documented human oversight, escalation paths and stop procedures, with evidence they are used.
How do you monitor AI systems in production?Continuous monitoring of performance, drift and incidents between scheduled reviews, with alerts and records.
What happens when an AI system gets it wrong?An incident log with root cause, customer impact, notifications and corrective actions.
Which third-party and foundation models do you rely on?A register of external models and vendors, with contract terms, change notifications and upstream monitoring.
How do you prevent and detect hallucinations, data leakage and IP exposure?Output testing, content controls and data-handling checks for generative AI, with results on file.
Which AI laws apply to you, and can you show compliance?A mapping of each system to the laws, regulations and standards that apply in each market, with evidence for each obligation.
Has anyone outside your company reviewed this?Third-party assessment with findings reviewed and signed by a qualified AxiLayer AI auditor, re-verifiable at any time.
How do you keep records for regulators, auditors and claims?A tamper-evident evidence chain with dates, versions and sign-offs, ready to share with an underwriter or a court.
Do your contracts allocate AI risk with customers and suppliers?A review of AI-related terms, warranties and indemnities against the evidence you actually hold.
Is the board informed about AI risk?A board-level summary of AI exposure, controls and open findings, updated on a set cycle.
How quickly can you show all of this?Evidence that is current every day, not assembled the week before renewal.
Insurance Readiness Quick Check

How ready is your AI for an underwriter?

Twelve questions, about three minutes. Your score and your evidence gaps appear on screen straight away. Nothing is sent unless you ask for the full results.

1We have a complete, current inventory of every AI system in use, including tools staff adopted on their own.
2Each AI system is classified by risk against the laws in every market where we operate.
3Every AI system is tested before release and again after each model or data change.
4We test AI systems for bias and unfair outcomes and keep the results.
5A named person can override or stop each important AI system, and the procedure is written down.
6We monitor AI systems in production for errors, drift and incidents between reviews.
7We log AI incidents with root cause, impact and corrective action.
8We keep a register of third-party and foundation models we rely on, with contract terms.
9Generative AI outputs are tested for hallucinations, data leakage and IP exposure.
10An outside party has reviewed our AI systems and signed its findings in the last 12 months.
11We can produce dated, versioned AI evidence for an insurer, regulator or court within days.
12Our board receives a regular summary of AI risk and open findings.
Around the world

AI and insurance, region by region

United States 5

  • As of 8 Oct 2026, 27 states, the District of Columbia and Puerto Rico have adopted the NAIC Model Bulletin requiring insurers to run a written AI systems program, and California, Colorado, New York and Texas have their own insurance AI rules. Source, 8 Oct 2026
  • Colorado extended its AI governance regulation for insurers from life to private passenger auto and health benefit plan insurers on 15 Oct 2025, with annual compliance reports from 1 Jul 2026 and a human-in-the-loop requirement for health coverage decisions. Source, Sep 2025
  • Twelve states piloted the NAIC AI evaluation tool (Risk Evaluation Supplement) through September 2026, and a third-party data and model vendor framework with a multistate vendor registry and annual attestations was exposed on 8 Jul 2026, both targeted for adoption at the Fall National Meeting. Source, 28 Aug 2026
  • States including California, Texas, Maryland, Nebraska and Arizona bar health insurers from using AI as the sole basis for medical necessity denials and open AI tools to state inspection. Source, 2 Mar 2026
  • New York DFS Circular Letter No. 7 (11 Jul 2024) requires insurers using AI or external consumer data in underwriting and pricing to test for unfair discrimination and oversee their vendors. Source, 8 Oct 2026

Canada and Latin America 3

  • Quebec's AMF Guideline for the Use of Artificial Intelligence, issued in March 2026 under the Insurers Act and other statutes, applies to authorized insurers from 1 May 2027 and expects an AI inventory, risk ratings, validation, bias controls and plain-language explanation of AI decisions to clients. Source, Mar 2026
  • OSFI Guideline E-23 brings AI and machine learning models used by federally regulated insurers, including foreign insurance branches, under formal model risk management from 1 May 2027, with model review independent of development. Source, 11 Sep 2025
  • The AMF's proposed governance rules for registrants, opened for consultation on 9 April 2026 and closed on 8 July 2026, list the use of artificial intelligence among the topics that registrants' written policies should address, extending AI expectations toward insurance distribution. Source, Jun 2026

Europe 6

  • Under the EU AI Act, AI used for risk assessment and pricing in life and health insurance is high-risk (Annex III point 5(c)); from 2 Dec 2027 providers face conformity assessment and insurer deployers must complete a fundamental rights impact assessment. Source, 24 Jul 2026
  • The new Product Liability Directive (EU) 2024/2853 treats software, including AI systems, as a product subject to strict liability and eases the burden of proof for claimants; it applies to products placed on the market after 9 Dec 2026, which widens product liability exposure for AI providers and their insurers. Source, 18 Nov 2024
  • Italy's Legislative Decree No. 179/2026, in force 23 Oct 2026, names the insurance supervisor IVASS as a market surveillance authority for AI Act purposes, so insurers' AI is supervised by their prudential regulator. Source, 8 Oct 2026
  • Germany's KI-MIG gives BaFin market surveillance responsibility for AI systems directly tied to regulated financial activities of supervised entities, including insurers. Source, 22 Jul 2026
  • Ireland's Regulation of Artificial Intelligence Act 2026 lets the Central Bank of Ireland impose administrative sanctions for AI Act breaches, bringing insurers' AI under Central Bank enforcement. Source, 30 Jul 2026
  • The UK FCA's AI good and poor practice publication of 19 Oct 2026 expects firms, including insurers, to apply lifecycle governance, outcome and bias testing across consumer groups, and Consumer Duty monitoring to AI they develop, procure or deploy. Source, 19 Oct 2026

Middle East 2

  • The CBUAE AI guidance note treats insurance claims outcomes as high-impact decisions and signals that fully automated insurance decisions with no possible human intervention are unlikely to meet supervisory expectations. Source, 8 Apr 2026
  • Saudi Arabia's National AI Risk Management Framework allows risk transfer through contracts, insurance or supplier agreements but states this does not remove an organization's own governance duties. Source, 22 Jul 2026

Africa 2

  • Egypt's National AI Governance Framework assigns AI enforcement in finance to sector regulators, naming the Central Bank of Egypt and the Financial Regulatory Authority, which supervises insurers. Source, 15 Mar 2026
  • South Africa's FSCA and Prudential Authority, which jointly supervise insurers, published a joint report in late 2025 on AI adoption, risks and regulatory implications in the financial sector. Source, 10 Dec 2025

Asia 7

  • MAS's Guidelines on AI Risk Management apply to all financial institutions, including insurers, with governance, inventory and risk materiality expectations from 7 Oct 2027 and lifecycle controls by 7 Oct 2028, including validation before deploying high-risk AI. Source, 7 Oct 2026
  • India's insurance regulator IRDAI formed a seven-member AI working group on 19 Jun 2026 with three months to recommend a governance framework for ethical, explainable AI in claims and fraud detection, controls against AI-driven attacks and a pre- and post-deployment AI audit framework. Source, Jun 2026
  • Hong Kong's Insurance Authority runs an AI Cohort Programme started in August 2025; by 15 Jun 2026 it had 10 core insurer participants building AI governance and use cases with the regulator. Source, 15 Jun 2026
  • Taiwan's AI Basic Act (Article 17) requires the government to define liability for high-risk AI applications and to establish remedy, compensation or insurance mechanisms, which points to future insurance-linked rules for high-risk AI. Source, Jan 2026
  • Thailand's July 2026 draft AI Act would impose strict liability for AI-related damage with limited defenses, a change that would raise liability exposure for providers and deployers and their insurers if enacted. Source, 2 Jul 2026
  • Korea's updated FSC AI Guidelines in the Financial Sector, effective 22 Jun 2026, apply to all financial companies including insurers and place final decision responsibility with human supervisors; high-impact AI such as credit decisions must meet the AI Basic Act duties. Source, 18 Jun 2026
  • Bank Negara Malaysia's 2025 AI discussion paper reported that 77% of insurers and takaful operators had adopted at least one AI solution, and it covers insurers in its proposed approach to responsible AI. Source, 11 Aug 2025

Oceania 5

  • APRA's 30 April 2026 letter to all regulated entities, including insurers, expects AI use case inventories, human involvement in high-risk decisions, audit rights over AI suppliers, and pre-deployment risk and security assessments with ongoing monitoring under the existing prudential framework. Source, 30 Apr 2026
  • On 27 August 2026 APRA and ASIC jointly told banks, insurers and superannuation trustees that frontier AI awareness must turn into action, focusing on board preparation, core cyber controls and concentration risk in shared third-party providers. Source, 27 Aug 2026
  • Australian law firm Lander & Rogers expects AI exclusions to become more common as courts begin holding companies responsible for harm from AI tools, leading insurers to offer AI-specific endorsements or standalone cover. Source, 28 Apr 2026
  • Sydney-based Tego Insurance said in December 2025 it is exploring a standalone AI insurance product, starting with healthcare professional risk, and expects broad AI exclusions to appear in professional indemnity, malpractice and liability policies. Source, 16 Dec 2025
  • Commentary on the April and May 2026 APRA and ASIC letters notes that insurers have begun to include sub-limits and exclusions for AI-related losses in cyber, professional indemnity and D&O policies, creating silent AI coverage questions for Australian policyholders. Source, May 2026

Global standards and schemes 8

  • Standard liability forms are moving to exclude AI: as reported in May 2026, Insurance Services Office (ISO) introduced two optional generative AI endorsements for bodily injury, property damage and personal and advertising injury, U.S. state regulators approved more than 80% of carrier requests to exclude AI-related damages from general liability, and Berkley applied absolute AI exclusions to D&O, E&O and fiduciary liability lines. Source, 1 May 2026
  • Affirmative cover is being tied to certification: AIUC launched in July 2025 pairing its AIUC-1 agent standard with insurance backed by large insurers' balance sheets, said it was developing relationships with insurers including Lloyd's of London, and described coverage for data breaches, discriminatory practices, IP infringement and incorrect automated decisions. Source, 23 Jul 2025
  • In February 2026 ElevenLabs used its AIUC-1 certification, based on 5,835 technical tests across 14 risk categories, to obtain what it called first-of-its-kind insurance for AI voice agents, covering cases such as an agent giving a customer incorrect information; the insurer and limits were not disclosed. Source, 12 Feb 2026
  • AIUC raised a US$40 million Series A on 15 September 2026 to extend certification-linked audits from enterprise agents to frontier AI models, with certified companies including ElevenLabs, Anysphere (Cursor) and Harvey AI. Source, 15 Sep 2026
  • Market commentary on silent AI exposure points to Lloyd's Market Bulletin Y5258 of July 2019, which required Lloyd's policies to state clearly whether cyber losses are covered or excluded, as the model for clarifying AI exposures in cyber, professional indemnity and D&O wordings. Source, May 2026
  • Armilla, a Lloyd's coverholder, offers a standalone AI liability policy with limits up to $25 million per organization, covering model errors, hallucinations, agent failures and AI regulatory violations. Source, Jan 2026
  • Deloitte's Center for Financial Services projects the global AI insurance premium market could reach US$4.8 billion by 2032. Source, 2025
  • Some standard commercial policies now carry absolute AI exclusions, while specialists such as Munich Re cover both developers and users of AI models; most AI risk is still covered silently under existing policies. Source, 16 Mar 2026
For companies
Walk into renewal with evidence

Show your broker a current, signed record of how your AI is inventoried, tested, monitored and overseen, instead of a questionnaire answered from memory.

For brokers and insurers
Underwrite AI with a signed record

A third-party evidence record supports underwriting, renewal and claims. Clients can share findings with you, and anyone can re-verify a record on our Verify page.

For boards
Know your AI exposure

A one-page view of AI exposure, controls and open findings, so directors can answer the questions their D&O insurer now asks.

Questions

Frequently asked questions

Does business insurance cover AI mistakes?

Often only silently, and less every year. Some standard commercial policies now exclude AI outright, while specialist AI liability policies offer affirmative cover for model errors, hallucinations and agent failures, usually after the insurer reviews how the AI is governed. Check your E&O, cyber and D&O wording with your broker.

What evidence do insurers want about AI?

Insurers increasingly ask for an AI inventory, risk classification, testing and bias results, human oversight, production monitoring, an incident log, a register of third-party models, and an outside review. AxiLayer AI produces each of these, with findings signed by a qualified AxiLayer AI auditor.

What is AI liability insurance?

It is affirmative cover written specifically for AI risks, such as losses from model errors, hallucinations, agent failures, data leakage and some AI regulatory violations. Lloyd’s-backed products offer limits up to $25 million, and some agent standards pair certification with cover up to $50 million.

Can a third-party AI audit lower my insurance costs?

No one can promise a premium outcome, and AxiLayer AI does not. What a signed third-party evidence record does is answer the underwriter’s questions with facts, which supports a clearer conversation at placement and renewal.

How can AxiLayer AI help me get my AI insurance-ready?

Take the Quick Check above to see your gaps, then request a briefing. We assess your AI systems with AxiSentinel, a qualified AxiLayer AI auditor signs the findings, and we package them as an Insurer Evidence Pack for your broker.