ICT risk management and incident reporting
A documented ICT risk framework owned by the management body and the three-stage reporting of major incidents.
Typical obligations
What typically lands on your desk
ICT third-party risk — AI included
Record ICT services in the register of information and classify them by criticality, check contracts against Article 30 and test exit strategies for critical functions.
Tax across jurisdictions
Insurance premium tax with its own rates, bases and exemptions per country — changed by budget speech, circular or administrative guidance, not by calendar.
AI in customer contact
The EU AI Act transparency duties have applied since 2 August 2026 — relevant as soon as you run chatbots or publish AI-generated content.
How Agentic360 helps
Target process, change service and AI governance in one place
The building blocks insurers can work with on the platform — each linked to its detail page.
DORA blueprint
13 modules, 24 grounded controls — from scoping through the reporting chain to the register of information. Your current state is mapped module by module.
Regulation Watcher
Supervisory sources are scanned continuously and new requirements mapped to your frameworks. Changes land as a task in the system instead of in a newsletter.
AI governance with mandatory evidence
Guardrails redact personal data, enforce citations and keep a human in the loop; every answer names its sources, agent, model and guardrail status — exportable as an audit PDF.
EU AI Act classification
Classify AI systems and generate the Annex IV technical documentation — or start with the free ten-minute check.
From a running pilot
Premium Quoting Pro: insurance premium tax in five jurisdictions
Premium Quoting Pro runs as its own module on Agentic360. For Germany, France, the United Kingdom, Spain and Italy, crawlers watch the responsible sources; every change moves through a review path up to the partner’s professional sign-off, and approved rates are sealed with an effective date. The module runs as a pilot with a real data set.
Read the client storyRegulations
Relevant regulations at a glance
Applies since 17 January 2025; ICT third-party risk under Articles 28–30.
Transparency duties since 2 August 2026; high-risk duties (Annex III) from 2 December 2027.
- Insurance premium tax per jurisdiction
Rates, bases and exemptions differ from market to market.
- GDPR
For every processing of personal customer data — including by AI agents.
Whether and to what extent a regulation applies to your organisation depends on size, sector and business model. This overview is orientation, not legal advice.
Related roles
Let’s talk about your register and your markets.
30 minutes: we show the DORA target process and how regulatory changes stay traceable in your organisation, from first signal to approval.