Question 1 of 6
Does your organisation have a documented inventory of all AI systems currently in use?
The EU AI Act requires providers and deployers of high-risk AI systems to maintain accurate records of all AI systems in use. Without an inventory, you cannot identify which systems require compliance action.
Question 2 of 6
Which of the following AI applications does your organisation currently use? Select all that apply.
This helps us tailor your results to the AI use cases most relevant to your regulatory exposure. Insurance-specific applications — especially those affecting pricing, underwriting or claims decisions — carry the highest regulatory scrutiny.
Select all that apply
Question 3 of 6
Have you assessed which of your AI systems would be classified as "high-risk" under Annex III of the EU AI Act?
Annex III high-risk categories directly applicable to insurance include AI used in credit and insurance risk assessments, pricing, and essential private services. Standalone systems must comply by 2 December 2027. The European Commission published draft guidelines on high-risk classification in May 2026 — these are now the primary reference for assessing which systems fall within scope. Identifying your high-risk systems now is the critical first step.
Question 4 of 6
Does your organisation have a named individual with formal accountability for AI governance?
The FCA's Senior Managers and Certification Regime (SM&CR) requires firms to be able to identify the senior manager accountable for any significant business risk — including AI. Without clear ownership, governance responsibilities fall through the gaps.
Question 5 of 6
Is your board or senior leadership regularly informed about AI systems in use and the associated risks?
The FCA expects board-level engagement with AI risk under existing governance frameworks. Firms where AI operates below senior leadership visibility are more likely to face supervisory questions about accountability and control.
Question 6 of 6
Does your organisation have a formal process for approving new AI systems before they are deployed?
The EU AI Act requires documented conformity assessments for high-risk systems before deployment. Even for lower-risk systems, a structured approval process is the foundation of defensible AI governance — and a clear FCA supervisory expectation.
Your answers are saved automatically as you go. You can return and change them at any time.