Coverage · Insurance

The insurance regime, operationalised.

The Solvency II review, a new recovery and resolution regime and the Retail Investment Strategy all land on insurers within the same window, on top of DORA, AML/CFT and the AI Act you already run. ComplyBridge tracks the policy and the limit, surfaces what overlaps with frameworks you already operate, and keeps your governance, ORSA and distribution evidence audit-ready between supervisory cycles. The actuarial engine stays where it belongs: in your models.

2,116
solo (re)insurers reporting under Solvency II across the EEA
4
key functions: risk management, compliance, internal audit, actuarial
15h
minimum annual training per IDD distribution employee
2027
the Solvency II review and IRRD apply from 30 January 2027

The framework

What are Solvency II, IDD and IRRD?

Insurance sits at the crossroads of EU finance. A typical undertaking already operates DORA, AML/CFT for its life business, data protection and, increasingly, the EU AI Act, which classes risk assessment and pricing in life and health insurance as high-risk. ComplyBridge resolves those obligations to the templates you already run and surfaces the overlaps explicitly, so you author only what is genuinely new.

The remaining work is where ComplyBridge does the heavy lifting: the system of governance and its key functions, ORSA, sustainability risk plans, pre-emptive recovery planning, and the full IDD distribution suite. Each obligation maps to a monitored control with cadence, owner and status. ORSA, the SFCR and RSR narrative, and the pre-emptive recovery plan get structured scaffolds; your actuarial and risk teams populate the analysis.

Authorisation & governance
Programme of operations, qualifying holdings, fit-and-proper for persons running the undertaking and key function holders, and the four key functions: risk management, compliance, internal audit and actuarial.
ORSA & risk policies
Own risk and solvency assessment lifecycle, underwriting and reserving, ALM, liquidity risk management plan, reinsurance and investment policy under the prudent person principle.
Sustainability & climate
Sustainability risk plans and climate change scenario analysis introduced by the Solvency II review, integrated into ORSA rather than bolted on.
Recovery & resolution
Pre-emptive recovery plan lifecycle under IRRD, resolvability cooperation, and the early-intervention indicators your supervisor will watch.
Distribution & conduct
IDD product oversight and governance, demands-and-needs testing, IPID and IBIP disclosures, conflicts and remuneration, the 15-hour annual training requirement, and the incoming value-for-money regime for insurance-based investment products.
Supervisory reporting governance
QRT, SFCR and RSR cycles: calendar adherence, sign-off and data-quality controls. Not the XBRL pipeline.

Which regime is yours.

Four ways an insurance business meets the rulebook. The register is sized to the one you're in, and shrinks when proportionality applies.

INSURANCE OR REINSURANCE UNDERTAKING

Life, non-life or reinsurance. Full Solvency II authorisation, the three pillars, the four key functions, ORSA and the reporting cycle. From 2027, pre-emptive recovery planning under IRRD where your supervisor brings you into scope.

SMALL & NON-COMPLEX UNDERTAKING

The Solvency II review creates a formal regime: lighter governance, reporting and ORSA requirements for undertakings that meet the criteria and are classified by their supervisor.

INSURANCE INTERMEDIARY

Brokers, agents, ancillary intermediaries and bancassurance distributors. Registration under IDD in your home member state, the distribution suite, and the 15-hour annual training rule. No prudential pillar.

GROUP

Group supervision adds a group ORSA, a group SFCR and a group supervisor coordinating the college. The review strengthens cross-border and group oversight.

Three regimes you're here for. Three you already run.

The register maps all six to one obligation set and shows where they overlap, so nothing is authored twice.

01Solvency IIDIR 2009/138/EC · DIR (EU) 2025/2
02Insurance Distribution DirectiveDIR (EU) 2016/97
03Insurance Recovery & Resolution DirectiveDIR (EU) 2025/1
04DORAREG (EU) 2022/2554
05AML/CFT for life businessAMLR · AMLD6
06EU AI ActREG (EU) 2024/1689

Risk assessment and pricing in life and health insurance are high-risk AI systems under the AI Act; AML/CFT applies to life business. Both resolve to templates you already run.

The path

Getting to a working insurance obligations stack.

The first six months get the register live and the policy pack authored ahead of the January 2027 application date. After that, the rhythm is cadence-driven: annual ORSA, periodic reporting, on-change notifications.

Ingest the register

Every insurance obligation ingested with cadence, default owner and applicability flags from your entity profile, including small and non-complex status.

Reconcile overlaps

Link items resolve to your existing DORA, AML/CFT, data protection and AI Act templates. Surface the gaps before authoring anything new.

Author and scaffold

Policy Studio produces the standalone policies and procedures; ORSA, SFCR/RSR and recovery plan shells await your analysis.

Operate the rhythm

The tracker drives the annual ORSA, the reporting calendar, POG reviews and on-change notifications. Board pack and supervisor-ready exports one click away.

How ComplyBridge helps

Prudential, conduct and operational, on one spine.

Book a demo
Overlap engine

Surfaces the obligations already satisfied by your DORA, AML/CFT, data protection and AI Act templates. No insurance-specific clones, no duplicate authoring.

Policy Studio & scaffolds

Governance framework, key-function charters, risk policies, POG and distribution procedures with the right parent-child structure; structured shells for ORSA, the SFCR/RSR narrative and the pre-emptive recovery plan.

Tracker per key function

Review cadence, owner (Risk, Compliance, Actuarial, Internal Audit, MLRO, CISO), status workflow and audit trail, sized by entity flags and shrinking automatically when proportionality applies.

Book a demo
Already supervised?

The register and tracker are the ongoing side from day one: the annual ORSA, the reporting calendar, POG reviews and on-change notifications, with board pack and supervisor-ready exports one click away. See how the ongoing side works →

FAQ

Common questions.

Does ComplyBridge calculate the SCR, MCR or technical provisions?
No, and deliberately so. Prudential calculation lives in actuarial models with the right data lineage, validation and review controls. ComplyBridge tracks the policy and the limit (the framework, the cadence, the sign-off) and links to your calculation source for the numbers. Trying to be both would make us bad at both.
−
We're an insurance intermediary, not an insurer. Is this for us?
+
What does the Solvency II review actually change for us?
+
How are you handling the Retail Investment Strategy?
+
How does this interact with EIOPA and our national supervisor?
+

See the register sized to your undertaking.

A short conversation about your profile: life, non-life, reinsurance, intermediary or group. We show you which obligations apply and which you already satisfy.

Already supervised? See how the ongoing side works →