Govern credit, claims and advisory AI before the supervisor asks.
Banks, insurers and asset managers already run AI in decisions that the AI Act treats as high-risk. AssurAI gives you the inventory, the controls and the evidence, and turns them into cover.
The pressure on financial services.
High-risk by definition
Creditworthiness assessment and risk pricing in life and health insurance are listed as high-risk uses under Annex III of the AI Act.
Third-party AI is ICT risk
Under DORA, AI services from vendors are ICT third-party arrangements that need oversight and a register.
Customer-facing answers
Advisory chatbots and agents speak to customers. A wrong answer is a conduct issue and, increasingly, a liability.
Where AssurAI fits.
Credit and claims models
Inventory, oversight and evidence for decision models, with the gaps listed before the audit.
Advisory and service chatbots
Policies on what the assistant may say and do, with every answer logged and incidents recorded.
Internal copilots on client data
Private models for analysts and advisers, so client data never reaches a public service.
Vendor AI oversight
A live view of which vendor AI touches which data, ready for the DORA register.
The rules that apply.
Dates and scope as of November 2026. This is an overview, not legal advice.
- EU AI Act, Annex III
- High-risk obligations for creditworthiness and insurance pricing apply from 2 December 2027.
- DORA
- Applies since 17 January 2025, including oversight of ICT third-party providers.
- GDPR, Article 22
- Limits on solely automated decisions with legal or similarly significant effects.
- Product Liability Act 2026
- From 9 December 2026 software and AI are products; courts can order disclosure and presume a defect.
- EN 18286:2026
- Harmonised standard for the quality-management obligations of AI providers.
One platform for the whole estate.
Be ready for 2 December 2027.
Start with an inventory of your AI estate and a gap list against the high-risk obligations.
Request a demo