How AI certification connects to insurance underwriting

Why underwriters need certification evidence

AI agent insurance is a young class of risk. Actuaries writing AI policies in 2026 do not have decades of loss data to draw on. The statistical base that underlies conventional liability pricing, years of claims history across thousands of risks, does not yet exist for autonomous AI agent deployments. Underwriters filling that gap are doing it with qualitative evidence: what governance does this operator have, how is the agent scoped, what controls are in place, and what happens when something goes wrong?

Certification is the structured format for answering those questions. An operator who submits a certification scorecard from a recognised framework has already done most of the underwriting preparation. The insurer does not need to construct a picture from scratch. The certification output tells them where the risks are, how the operator manages them, and what the residual exposure looks like. The same logic sits behind AIUC-1: the Artificial Intelligence Underwriting Company built its standard to connect certification to insurance, and the first AIUC-1-backed policy, written for ElevenLabs, followed testing against it.

The dynamic in Europe is different from North America but converging toward the same structure. European insurers entering the AI market in 2026 are building their underwriting criteria in parallel with the EU AI Act enforcement regime. The AI Act's requirements for risk management, documentation, human oversight, and logging map almost directly onto the information that an insurer needs for a submission. A deployer who has built Article 9, Article 14, and Article 26 compliance is carrying most of the governance evidence that an underwriting questionnaire will ask for. The gap is independent verification. That is what certification provides.

The four underwriting questions and how certification answers them

An underwriter writing AI agent cover has to answer, in some form, four questions. Each one maps to a certification dimension.

1. What is the scope of authorised action?

The insurer needs a precise definition of what the agent is permitted to do, against whom, and under what conditions. A vague scope produces vague cover. An agent described as "a customer-facing assistant" is not insurable in any meaningful sense. An agent described as "a customer service agent authorised to issue refunds up to EUR 200, retrieve order status, and escalate to a human for disputes, operating within the UK and Netherlands markets" is a rated risk.

The Distribution Control dimension of the Agent Certified methodology measures exactly this: whether the agent's scope is written down, whether it is enforced technically, and whether there are mechanisms to prevent scope creep. A high score on Distribution Control is the direct answer to the underwriter's first question.

2. What governance exists around the agent?

The insurer wants to know who is accountable for the agent, who approves changes to its capabilities, and who reviews incident data. An agent with no named owner and no change management process is a moral hazard: the operator can expand what the agent does without the insurer's knowledge, increasing the insurer's exposure after the policy is written.

The Governance dimension of the methodology measures the maturity of the operator's AI governance structure: whether the agent has a named owner, whether there is a documented change management process, and whether the governance structure is proportionate to the agent's risk level. This dimension, weighted at sixteen points out of one hundred, is the second heaviest in the framework, reflecting its direct relationship to insurer trust.

3. What audit telemetry is retained?

The insurer needs confidence that, in the event of a claim, there is a tamper-evident record sufficient to reconstruct the chain of causation. Without that record, the insurer cannot distinguish a valid claim from a fabricated one, and cannot exercise subrogation rights against a provider where appropriate.

The AI Integration dimension measures the technical infrastructure around the agent: logging completeness, audit trail integrity, retention periods, and access controls. An agent that logs inputs, outputs, and intermediate steps with a tamper-evident record and a retention period proportionate to its liability exposure scores well on this dimension and gives the insurer the assurance it needs about claims reconstruction.

4. What independent certification exists?

This is the question that the other three questions build toward. Self-assessment answers the first three questions. Independent certification verifies them. The gap between what an operator reports and what an assessor independently verifies is the underwriting uncertainty that drives premium loading. Certification closes that gap.

For operators pursuing coverage in the European market, the relevant certification frameworks are ISO/IEC 42001:2023 (AI management systems), NIST AI RMF 1.0 (risk management), and the Agent Certified methodology. The first two are process and management frameworks. Agent Certified is specifically designed to evaluate individual agent deployments and produce output in the format that an underwriting review can use.

What the AIUC-1 standard established

The AIUC-1 standard, published by the Artificial Intelligence Underwriting Company (AIUC) and first applied to ElevenLabs, is the most significant precedent in the emerging AI insurance market. It established, for the first time, that coverage for an AI deployment can be conditional on passing a structured evaluation process rather than simply filling in a questionnaire.

The ElevenLabs policy followed more than 5,000 adversarial simulations conducted before coverage was written. AIUC-1 is currently US-native. Its European adaptation will need to incorporate the EU AI Act compliance evidence set: the risk management system under Article 9, the technical documentation under Article 11, the human oversight register under Article 26(2), and the logging schedule under Article 26(6). The Agent Certified methodology is designed to produce exactly this evidence set for the European market.

How certification tier affects coverage terms

The five certification tiers in the Agent Certified framework describe different evidence positions, and each puts an operator in a different place for a conversation with a broker. Certification does not guarantee coverage, coverage does not require certification, and no insurer has committed to recognise an Agent Certified result. Whether a result changes terms is the carrier's decision.

An operator at the Pre-Assessment tier (raw score below 20 out of 100) has little structured evidence to offer an underwriter, who is then being asked to write against an unknown risk. An operator at the In Progress tier (score 20 to 34) has begun governance work and can demonstrate intent, and the gaps the assessment records are the ones an underwriter is likely to ask about, or to answer with exclusions and sub-limits.

At Certified tier (score 35 to 54), an operator holds the evidence set this framework treats as the minimum for a complete underwriting submission. At Advanced tier (score 55 to 74), the operator brings a stronger evidence package to a broker, which gives more to discuss with each carrier approached. At Elite tier (score 75 and above), the evidence shows governance and technical maturity across all seven dimensions. What any of this is worth in cover or price is for each carrier to decide, and none has committed to a figure.

For a full description of each tier and the per-dimension minimums that apply, see the certification levels page.

The certification output document

An Agent Certified assessment produces three outputs: a scorecard, a dimension breakdown, and a findings document. The scorecard shows the weighted total and the tier. The dimension breakdown shows the score on each of the seven dimensions with a brief rationale. The findings document describes the specific gaps identified, ranked by severity, with recommended remediation steps.

All three outputs are designed to be readable by an underwriter who is not familiar with the certification methodology. The scorecard is the headline number. The dimension breakdown maps to the underwriter's risk model. The findings document gives the insurer visibility into the known residual risks that the operator is carrying. That visibility is valuable to the insurer, even where findings are not fully remediated: a known, documented gap is preferable to an unknown one from an underwriting perspective.

Operators preparing for a coverage submission should request an assessment well in advance of the submission date. The assessment process takes two to four weeks depending on system complexity. The findings document allows time for remediation. A second assessment after remediation produces an updated scorecard that reflects the improved position. The sequence of two assessments, with documented remediation between them, is the strongest possible evidence package for an underwriting submission.

The relationship between EU AI Act compliance and certification evidence

A deployer who has built a genuine EU AI Act compliance programme is carrying most of the evidence that a certification assessment will ask for. The risk management system under Article 9 maps to the Governance and Trust and Safety dimensions. The technical documentation under Article 11 provides the system description and capability boundaries that the Context Integrity dimension requires. The human oversight register under Article 26(2) provides the evidence the Autonomy Envelope dimension assesses. The logging schedule under Article 26(6) maps to the AI Integration dimension.

Compliance and certification are not the same thing. Compliance is self-declared against a regulatory standard. Certification is independently verified against a structured methodology. The value of certification is not that it produces different evidence but that it verifies the evidence that compliance has already generated. For an insurer assessing a European deployer, the combination of AI Act compliance documentation and an independent certification assessment is the strongest possible submission.

For the full regulatory context, agentliability.eu tracks the EU AI Act operator obligations, Article 14 human oversight requirements, and the enforcement architecture in detail. For the coverage products being developed for the European market, agentinsured.eu monitors active carriers and policy terms.

Questions

Why do AI insurers ask for certification before underwriting?

Insurers writing AI agent cover need to price the moral hazard risk: the risk that an operator will run their agent carelessly because they believe insurance will cover the consequences. Certification against a recognised framework is an independently checked way to show that the operator has governance, scope controls, and audit telemetry in place. It allows the underwriter to move from an unknown risk to a rated risk.

Which certification frameworks do insurers currently recognise?

The AIUC-1 standard is the only framework so far built explicitly to connect certification to insurance coverage. ISO/IEC 42001:2023 and the NIST AI RMF 1.0 are the two instruments most often named in AI governance questionnaires, but no published list of carriers recognising either exists, so no such claim is made here. The Agent Certified methodology maps all three frameworks and is designed to produce output that an underwriter can read directly.

Does certification reduce the premium for AI agent insurance?

In the North American market, coverage for an AI deployment has been written on the basis of a structured evaluation rather than a questionnaire alone: the AIUC-1 standard backed the first AI agent insurance policy of its kind, written for ElevenLabs. No insurer has published how a certification result changes a premium, and none has committed to a premium change for holding an Agent Certified result. The mechanism is that certification reduces what the underwriter has to estimate; whether that shows up in terms or price is the carrier's decision.

What is the Agent Certified assessment process?

The Agent Certified assessment evaluates an AI agent deployment across seven dimensions: Trust and Safety, Context Integrity, Distribution Control, Product Robustness, Governance, AI Integration, and Autonomy Envelope. Each dimension is scored from one to ten. The weighted total determines the certification tier. The output includes a scorecard, a dimension breakdown, and a findings document that the underwriter can review alongside a coverage application.

Sources

1. Artificial Intelligence Underwriting Company (AIUC). AIUC-1 standard, covering data and privacy, security, safety, reliability, accountability and societal risk. First policy application: ElevenLabs. aiuc.com, accessed August 2026.
2. International Organization for Standardization. ISO/IEC 42001:2023, Information technology, Artificial intelligence, Management system. Geneva, 2023.
3. National Institute of Standards and Technology. AI Risk Management Framework 1.0 (NIST AI 100-1). Gaithersburg, January 2023.
4. European Parliament and Council. Regulation (EU) 2024/1689 on harmonised rules on artificial intelligence, Articles 9, 11, 14, and 26. Brussels, 2024.
5. Armilla. Affirmative AI Liability Insurance. Armilla Insurance Services is a Coverholder at Lloyd's; the cover is underwritten by certain underwriters at Lloyd's. armilla.ai, accessed August 2026.
6. Agent Certified. Methodology specification, April 2026 version. Published at agentcertified.eu/methodology.