Compliance/DORA/InsurTech
DORA compliance for InsurTech
Insurance entities are financial entities under DORA. ICT incident management + third-party ICT risk register apply. AI claims-triage outages → Art. 18 incidents.
What applies
Articles + provisions of Regulation (EU) 2022/2554 — Digital Operational Resilience Act most directly engaged by InsurTech deployments:
- Art. 17
- Art. 18
- Art. 28
What this looks like in InsurTech
Insurance entities are financial entities under DORA. ICT incident management + third-party ICT risk register apply. AI claims-triage outages → Art. 18 incidents.
Flagship exampleClaims-AI misclassification incident: chain provides the impact metric + the time window for the 24h notification.
Where Promethean's evidence layer fits
The substrate emits specific evidence kinds that map to DORA obligations. Most directly relevant for InsurTech:
For the full sector view including LLM-feature catalogue, tier recommendation, and reviewer-gate examples, see the InsurTech sector page.
Adjacent cells
Same regulation, other sectors
Other regulations for InsurTech