AI Compliance & Regulation

Navigate AI regulations, compliance requirements, and audit readiness with continuous supervision.

105 articles & guides

EU AI Act Compliance: A Practical Guide for Enterprise AI Teams

Everything you need to know about EU AI Act compliance — risk classifications, requirements, timelines, and a practical checklist for enterprise AI teams.

Read the pillar article →

Latest in AI Compliance & Regulation

AI GovernanceSeptember 21, 2026

Your Company Is Already Using AI. Just Not Safely.

Dave DuPont, Shane Emmons, and Future Point of View's Scott Klososky on why carriers stall at their third AI agent, and what separates a governance policy from day-to-day oversight.

AI GovernanceSeptember 16, 2026

AI Incident Response: A Plan for When the Model Is the Incident

An AI incident response plan for production LLMs, chatbots, and agents: a six-class incident taxonomy, severity tiers, a phased runbook, and roles.

AI GovernanceSeptember 16, 2026

How to Detect Shadow AI: Six Signals Your Existing Tools Already Have

Six signals your identity, network, endpoint, finance, and code systems already record, how to detect shadow AI with them, and why detection has a ceiling.

AI GovernanceSeptember 16, 2026

AI Acceptable Use Policy: What to Include, Plus a Template You Can Adapt

What an AI acceptable use policy should contain, how to roll it out, and where the rules actually get enforced. Includes a full 15-section template to adapt.

AI GovernanceAugust 4, 2026

Whose Agent Was That?

OpenAI's models broke out of a test sandbox and into Hugging Face through somebody else's open endpoint. Anthropic found three more cases, and two of the companies never noticed. If an agent behaves more like a worker than a binary, governance has to look like supervision.

AI GovernanceJuly 10, 2026

Illinois Wrote Independent AI Audits Into Law. Carriers Should Read the Fine Print.

Illinois SB 315, the Artificial Intelligence Safety Measures Act, makes first-in-nation annual independent AI audits law for frontier developers. It doesn't regulate carriers. The audit standard it sets is the part carriers should read.

AI GovernanceJuly 7, 2026

AI Posture Management: How We Govern Agents That Act

AI posture management is how Swept does AI governance for autonomous agents: prove an agent is safe before it ships, enforce policy inline while it runs, and keep audit-ready proof of every decision.

AI GovernanceJune 26, 2026

The NAIC Pilot Closes in September. What Your Mutual Needs on File.

The NAIC AI Systems Evaluation Tool is in a twelve-state pilot through September 2026, with adoption targeted for the fall. Here is the evidence a mutual should have ready before examiners arrive.

AI GovernanceJune 26, 2026

The Vendor Model Problem Mutual Carriers Cannot Outsource

Most AI inside a mid-sized mutual is built by a vendor, but the carrier answers for it at examination. Here is how mutual carriers close the third-party model accountability gap.

AI GovernanceApril 27, 2026

The Insurance CIO's AI Governance Playbook for Q3 2026: What to Ship Before the NAIC Pilot Closes

Five concrete deliverables, ninety days, and the November Fall Meeting on the other side. The Q3 trade between governance investment and Q4 deployment velocity is the right trade.

AI GovernanceApril 27, 2026

Cyber, Professional, Marine: The AI Governance Differences Specialty Lines Cannot Ignore

Personal-lines AI governance playbooks miss the line-specific risks in specialty. Cyber drifts hourly, professional liability resists explainability, and marine models fail catastrophically.

AI GovernanceApril 27, 2026

The Compliance-Ready AI Audit Trail: A Field Specification for Insurance Carriers

Your logs aren't an audit trail. They're discovery exhibits. The Lokken ruling and the NAIC pilot converge on a single requirement: tamper-evident, queryable records of every consequential AI decision.

AI GovernanceApril 27, 2026

Vendor AI Contracts That Survive a Market Conduct Exam: Eight Clauses Carriers Need

Most AI vendor MSAs were drafted before the NAIC bulletin and lack the audit, data-access, and continuity rights regulators now demand. Here are the eight clauses every contract needs.

AI GovernanceApril 27, 2026

Build the Model Inventory Examiners Will Ask For: A Specification for Carriers

If you can't list every model that touches a policyholder by Friday, the registry will list them for you. A field-tested spec for the inventory the NAIC pilot now demands.

AI GovernanceApril 27, 2026

Explainable AI in Insurance Underwriting: What Regulators Actually Want to See in a Rate Filing

Examiners do not want SHAP plots. They want a narrative that maps model behavior to filed assumptions and proves protected-class proxies were tested and excluded.

AI GovernanceApril 27, 2026

"Voluntary for Regulators, Compulsory for Companies": Why the NAIC AI Pilot Pushback Matters for Every Carrier

Trade groups lost the procedural fight over the NAIC's AI evaluation tool. The next fight is the findings, and those start showing up in the September report. Self-assessment now is the only hedge that closes.

AI GovernanceApril 27, 2026

The 2026 NAIC Third-Party Model Law: A Vendor Registry Is Coming for Insurance AI

The NAIC's draft framework will require model vendors used in pricing, underwriting, and claims to register with regulators. Carrier diligence obligations remain unchanged.

AI GovernanceApril 27, 2026

Executive Order 14365 vs. NAIC: How the Federal-State AI Fight Lands on Your 2026 Compliance Calendar

Executive Order 14365 does not exempt insurance, and the NAIC is publicly opposed. Carriers now operate under two regimes simultaneously while courts sort out which one wins.

AI GovernanceApril 27, 2026

Discovery Just Got Opened on Carrier AI: How the Lokken Ruling Rewrites Bad-Faith Litigation

A Minnesota federal court has ruled that a carrier's AI use is itself a discoverable fact. Carriers without per-decision audit trails of human review now face an evidentiary problem they cannot solve under deadline.

AI GovernanceApril 19, 2026

The 17-Point Loss Ratio Swing That Should Terrify Every Reinsurer

State Farm General paused new California homeowners business in May 2023 citing reinsurance affordability, then non-renewed 30,000 policies in March 2024. The chain from a multi-point loss ratio swing to a treaty underwriter's red pen is short.

AI GovernanceApril 19, 2026

Florida Postmortem: When Reinsurance Disappears, Carriers Disappear

Florida between 2020 and 2023 ran the cleanest natural experiment in carrier mortality the US insurance industry has produced in fifty years. Three failure modes, three carriers, one root cause. We map each one to its AI-era analogue.

AI GovernanceApril 19, 2026

The Lemonade "AI Jim" Tweet Is a Reinsurance Case Study, Not a PR Story

On May 24, 2021, Lemonade posted a now-deleted Twitter thread about its AI claims handler that the company quickly retracted. Most of the industry read it as a public-relations incident. The treaty desks read it as a disclosure question, and that reading is the one P&C boards should study.

AI GovernanceApril 19, 2026

Hippo's 273% Loss Ratio: What Happens When AI Can't See Climate

Hippo reported a 273% net loss ratio on homeowners in Q1 2023 and paused new homeowners business nationwide. The mechanism that produced that number is the same mechanism every carrier rating with ML on historical loss data eventually faces.

AI GovernanceApril 19, 2026

The One Question Every Insurance CEO Should Ask Their Board Before the Next Cat Season

Thirteen prior posts mapped the chain from AI model retraining to carrier insolvency. This is the synthesis. One question, one framework, one board agenda for the renewal cycle every regional and specialty CEO is already inside of.

Guides & Definitions

What is AI Compliance?

AI compliance is the set of decisions, controls, and practices that keep your AI systems aligned with applicable laws, regulations, and internal policies.

What is AI Risk Management?

AI risk management is the systematic process of identifying, assessing, and mitigating risks across the AI lifecycle to protect your organization from technical, operational, and regulatory failures.

What is an AI Audit Trail?

An AI audit trail is a comprehensive, immutable record of AI system decisions, inputs, outputs, and changes—essential for compliance, accountability, and incident investigation.

What is Enterprise AI Security?

Enterprise AI security protects AI systems, models, and data from threats including adversarial attacks, data breaches, model theft, and supply chain vulnerabilities.

What is Healthcare AI Governance?

Healthcare AI governance ensures AI systems used in clinical settings are safe, accurate, compliant, and trustworthy—protecting patients and organizations in high-stakes medical environments.

Get audit-ready with Swept AI supervision

Generate compliance evidence from continuous supervision and audit trails for regulatory requirements.

Explore More Supervision & Trust Topics

112 articles

AI Compliance & Regulation

EU AI Act Compliance: A Practical Guide for Enterprise AI Teams

Latest in AI Compliance & Regulation

Your Company Is Already Using AI. Just Not Safely.

AI Incident Response: A Plan for When the Model Is the Incident

How to Detect Shadow AI: Six Signals Your Existing Tools Already Have

AI Acceptable Use Policy: What to Include, Plus a Template You Can Adapt

Whose Agent Was That?

Illinois Wrote Independent AI Audits Into Law. Carriers Should Read the Fine Print.

AI Posture Management: How We Govern Agents That Act

The NAIC Pilot Closes in September. What Your Mutual Needs on File.

The Vendor Model Problem Mutual Carriers Cannot Outsource

The Insurance CIO's AI Governance Playbook for Q3 2026: What to Ship Before the NAIC Pilot Closes

Cyber, Professional, Marine: The AI Governance Differences Specialty Lines Cannot Ignore

The Compliance-Ready AI Audit Trail: A Field Specification for Insurance Carriers

Vendor AI Contracts That Survive a Market Conduct Exam: Eight Clauses Carriers Need

Build the Model Inventory Examiners Will Ask For: A Specification for Carriers

Explainable AI in Insurance Underwriting: What Regulators Actually Want to See in a Rate Filing

"Voluntary for Regulators, Compulsory for Companies": Why the NAIC AI Pilot Pushback Matters for Every Carrier

The 2026 NAIC Third-Party Model Law: A Vendor Registry Is Coming for Insurance AI

Executive Order 14365 vs. NAIC: How the Federal-State AI Fight Lands on Your 2026 Compliance Calendar

Discovery Just Got Opened on Carrier AI: How the Lokken Ruling Rewrites Bad-Faith Litigation

The 17-Point Loss Ratio Swing That Should Terrify Every Reinsurer

Florida Postmortem: When Reinsurance Disappears, Carriers Disappear

The Lemonade "AI Jim" Tweet Is a Reinsurance Case Study, Not a PR Story

Hippo's 273% Loss Ratio: What Happens When AI Can't See Climate

The One Question Every Insurance CEO Should Ask Their Board Before the Next Cat Season

Follow the Fortunes Won't Save You. The Second Circuit Already Said So.

Your Reinsurer Has Already Formed an Opinion About Your AI

The NAIC Bulletin Is the Floor Your Reinsurer Will Hold You To

Demotech's 2022 Florida Letter Is the Template for Every AI Downgrade Coming

Why AM Best's Comprehensive Adjustment Is the Hidden AI Downgrade Lever

The One Treaty Clause Your AI Strategy Lives or Dies On

Merced County, Camp Fire, and What 112 Years of Underwriting Buys You

The 89-Day Death Clock: What FedNat Teaches Every Carrier Building AI

The Reinsurance Treaty Is Where AI Risk Becomes Existential

19 State AI Laws in Two Weeks. Here's What Every Enterprise Should Build.

The Future of AI and Claims: Live Panel at the 2026 PLRB Claims Conference

The NAIC AI Evaluation Tool Is Live in 12 States. Here's What It Actually Asks.

The NAIC AI Bulletin Grew Teeth. Here's What Carriers Need to Build.

The 2026 Mutual Factor: Why Cooperative Carriers Have an AI Governance Advantage Nobody Else Can Copy

Predictive Model Regulation Is Coming for Insurance. Rate Filings Will Never Be the Same.

Data Privacy Laws and AI Governance in Insurance: Lessons from CCPA

AI in Financial Examinations: What Regulators Will Ask and What Carriers Must Produce

ESG Reporting Meets AI Governance: Why Insurance Carriers Need Both

New Risks Need New Models. AI Is Both the Problem and the Solution.

Colorado AI Act and Insurance: A Compliance Roadmap for the July 2026 Deadline

AI Is a Catalyst for Insurance. Governance Needs to Keep Pace.

Insurance Regulators Are Forcing AI Governance. Most Carriers Aren't Ready.

Your AI Vendor Security Questionnaire Is Asking the Wrong Questions

Your AI Risk Taxonomy Is a Catalog, Not a Control System

How to Build an AI Governance Team: Roles, Structure, and Scaling

Healthcare AI Governance: Where Compliance Failures Cost Lives

RAG Pipeline Governance: The Enterprise Blind Spot That Traditional AI Oversight Misses

Voice AI Governance: Why Real-Time AI Agents Demand a Different Compliance Playbook

Why AI Compliance Training Falls Short Without Real Governance

AI Governance for SMBs: Start Small, Scale Smart

Shadow AI Is Your Biggest Governance Blind Spot

What Counts as an AI System Under the EU AI Act?

AI Vendor Risk in Financial Services: How the FS AI RMF Changes Third-Party and Fourth-Party AI Oversight

The CRI FS AI RMF: What 108 Financial Institutions Agree AI Risk Management Actually Requires

Insurance AI Governance Demands More Than a Checklist

State AI Regulations in 2026: Colorado, Texas, California, and What's Coming

NIST AI RMF: A Practical Implementation Guide for Enterprise Teams

ISO 42001: The Complete Guide to AI Management System Certification

Why Most ML Models Degrade Over Time

Why Model Robustness Matters More Than Accuracy

Why Model Monitoring Starts Before Deployment

Who Should Explain Your AI

White Box Models: When Interpretability Matters

What Is Explainable AI and Why It Matters

Understanding Model Drift: Types, Detection, and Response

Understanding LLMs and Generative AI: Beyond the Hype

Understanding Bias and Fairness in AI Systems

Ten Core Principles for Responsible AI

Shapley Values Explained for AI Practitioners

Root Cause Analysis for ML Model Issues

Responsible AI in Financial Services: What Model Risk Teams Need to Know

Observability for Multi-Agent AI Systems

Explainable Monitoring for AI Deployments