Every claim starts as a document. It should end as a traceable decision.
Claims notifications, applications and medical reports arrive by post, email and portal. AI can read, sort and prepare them. What must not change: who decides, which rule applied, and that you can still show it months later.
DORA · EU AI Act · Data Act
01 — The industry
Documents, core systems, regulation.
Three things meet in every insurance back office.
Documents
Claims notifications, invoices, expert reports, applications, medical reports: most cases begin with a document that someone has to read before anything else can happen.
Core systems
Policy and claims systems often date back decades. New processes have to work with them instead of replacing them in one step.
Regulation
DORA has applied to insurers subject to Solvency II since 17 January 2025. Under the EU AI Act, AI systems for risk assessment and pricing in relation to natural persons in life and health insurance are high-risk; the obligations for them apply from 2 December 2027.
We know the documents and core systems from our own work: some of our first larger projects, in 2019 and 2020, came from insurance and ran on enterprise BPMN platforms — applications, claims management, policy issuance and the connection of core systems that partly date back to the 1990s.
02 — Use cases
Where AI helps, and where a person decides.
For each use case: what the agent does, where a person decides, and which products it is built with. Connecting your existing systems is project work.
-
01
Claims intake
Claims notifications, invoices and expert reports arrive by post, email and portal and end up in one inbox.
- Agent
- Recognizes the document type, reads claim number, date and amounts, and assigns the document to the claim.
- Human
- Handles unclear cases, releases payments above a threshold you set and decides on every reduction or rejection.
- Products
- Edge AI FabricProcess Core
-
02
Underwriting in life and health
Applications come with medical reports, questionnaires and supporting documents.
- Agent
- Checks completeness, reads the relevant details from medical reports and prepares the risk assessment.
- Human
- The underwriter decides. Which rule version applied is recorded with the decision.
- Products
- Process CoreEdge AI Fabric
-
03
Core systems and exit readiness
Your policy and claims systems stay. A process layer above them carries the process, the approvals and the audit trail, so that a later change of system or provider does not mean rebuilding the process.
- System
- Process Core runs the process in your own infrastructure and connects existing systems through defined integrations.
- Human
- You identify which ICT services support critical or important functions. For each of them we document the way out, as input for the exit plan that DORA requires of you.
- Products
- Process CoreDigital resilience
* One process, end to end
Claims intake, step by step.
Illustrative flow. Thresholds, rules and systems are yours to set.
- 01 · ReceivePost, email and portal in one inbox
- 02 · Read and assignDocument type, claim number, date, amounts
- 03 · CheckAgainst policy and rules; the rule version is recorded
- 04 · ReleaseA person releases payments above the threshold
- 05 · RecordPayment instruction to the core system; every step in the audit trail
03 — Regulation
What applies, and what software can contribute.
Compliance is a property of your organization and its processes, not of a tool. Software can make the implementation easier or harder.
-
DORA
Applies since 17 January 2025
In short
ICT risk management, incident reporting and management of ICT third-party risk, including exit strategies for ICT services that support critical or important functions.
What software can contribute
Self-hosted operation, documented exit paths and cryptographically verifiable audit exports.
-
EU AI Act
High-risk obligations from 2 December 2027
In short
Risk assessment and pricing for natural persons in life and health insurance are high-risk uses (Annex III), with requirements including human oversight, documentation and transparency.
What software can contribute
A person decides in the process, and inputs, rule version and result are recorded with every decision.
-
Data Act
Applies since 12 September 2025; no switching charges from 12 January 2027
In short
Cloud providers must enable switching to another provider or to your own infrastructure, with set notice and transition periods. From 12 January 2027 they may no longer charge for it.
What software can contribute
Whether your processes can move along is a question of architecture: processes that do not depend on the services of a single provider.
04 — Products
What we build it with.
All products are open source under Apache 2.0 and run on your own infrastructure.
- Process Core
Process platform for regulated software: self-hosted, verifiable audit exports, versioned and reconstructible execution
- Edge AI Fabric
Document AI on trusted Macs in your organization, end-to-end encrypted, Relay you can run yourself
Our service around it: Digital resilience — cloud exit, AI on-premise and on-edge, open-source strategy.
05 — Talk to us
Which step between claims intake and payment costs you the most time today?
After that we talk about documents, rules, approvals and which systems have to stay.
Talk to an engineer ↗