Topic starter
02/08/2026 9:45 am
TL;DR: The NAIC model bulletin on AI is guidance until states adopt it, but 25 states had formally adopted it by July 2026 and another 8 were in progress, while examiners still expect documented testing, monitoring, and vendor accountability, according to Openlayer. For insurers, the compliance burden is shifting from policy language to auditable evidence that AI systems were tested before deployment and monitored after.
Editorial analysis by NHI Mgmt Group, based on content published by Openlayer: “NAIC AI Model Bulletin: What Insurers Must Prepare for in July 2026”.
By the numbers:
- 25 states had formally adopted the NAIC Model Bulletin by July 2026.
Key questions
Q: What do insurers need to prove when AI is part of underwriting or claims decisions?
A: They need to prove who owns the model, how it was tested before deployment, how it is monitored after release, and how exceptions are escalated.
Q: Why do third-party AI models still create regulatory risk for insurers?
A: Because the insurer remains accountable for the model’s outputs even when the model comes from a vendor.
Q: Where do AI fairness controls fail if teams only look at aggregate accuracy?
A: They fail when subgroup harms are hidden inside a good overall score.
Practitioner guidance
- Document a named AI owner for every production model Assign clear accountability for underwriting, claims, pricing, and fraud models so examiners can trace decisions to a person or committee with authority to act.
- Keep versioned pre-deployment test records Store the input set, subgroup breakdown, threshold used, reviewer decision, and model version for every fairness or performance test run.
- Monitor post-deployment drift and adverse impact Track subgroup performance over time and require escalation when outputs change materially after release or vendor updates.
Bottom line: The NAIC bulletin is changing AI governance in insurance from a policy exercise into an evidence exercise.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 12:38 pm
AI governance in insurance is becoming an evidentiary discipline, not a policy discipline. The bulletin does not merely ask whether a carrier has an AI policy on paper. It pushes firms to prove testing, monitoring, and accountability in a way regulators can inspect after the fact. That matters because governance without records cannot survive examination. Practitioners should treat this as a shift from framework adoption to control proof.
A few things that frame the scale:
- 52% of respondents see AI security decision-making power shifting toward platform and infrastructure teams rather than the executive suite, according to the 2026 Infrastructure Identity Survey.
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: How should insurers prepare for state examination of AI governance?
A: They should maintain a living AI inventory, retain test and monitoring records, and document who can approve, pause, or retire each system. Examiners are likely to ask for proof that governance is operating, not just written down, so the evidence chain needs to be complete from approval through ongoing oversight.
👉 Read our full editorial: NAIC AI model bulletin puts insurers on the hook for AI governance