AI agents for compliance teams in insurance in the United States

US insurers' compliance teams can use AI agents to check policy forms and rates in use against what each state approved, prepare for market conduct examinations, track claims against state timelines and keep the documentation that state guidance on insurers' AI use expects. State insurance regulators hold the insurer accountable, so filings, exam responses and fairness conclusions stay with people.

What does a US insurance compliance team spend its time on?

Insurance in the United States is regulated state by state. A national carrier answers to dozens of state insurance departments, each with its own filing requirements, claims rules and examination practice. The NAIC coordinates, writing model laws and guidance that states adopt in their own form. This multiplies the compliance workload.

Rates and forms. In most lines, policy forms and rates must be filed with, and often approved by, each state. The versions in use must match what was approved in that state. A form or rate used in the wrong state, or an outdated version still in production, is a common examination finding.

Market conduct examinations. Regulators examine how insurers sell, underwrite, rate and settle claims. Exams start with data calls and requests for samples, policies and procedures, often on short deadlines.

Claims handling. State laws on unfair claims settlement practices set timelines for acknowledging, investigating and paying claims, and requirements for explaining denials. The timelines differ by state.

AI and data governance. The NAIC has adopted model guidance on insurers' use of AI, which many states have taken up, expecting a written governance programme, controls over third-party models and data, and testing for unfair discrimination. NYDFS has issued its own guidance on the use of external data and AI in underwriting and pricing.

Where can AI agents help?

Depth sets how far each agent may act: 1 reads, 2 drafts for a person, 3 executes routine work within bounds.

1. Form and rate reconciliation (depth 1). The agent compares policy forms and rating rules in the production system with the approved filing for each state and lists any mismatch. This is the most US-specific use, because the state-by-state structure creates more room for drift than in any other market.
2. Market conduct exam preparation (depth 2). When a data call arrives, the agent maps each request to the data and documents that answer it, drafts the response index and flags requests the insurer cannot yet meet.
3. Claims timeline testing (depth 1). The agent tests closed claims against each state's timelines and denial explanation requirements, and reports breaches by state and team.
4. AI governance inventory (depth 2). The agent drafts and maintains the inventory of AI systems and external data sources the governance programme requires, with owner, use and testing status for each.
5. Complaint index (depth 3). The agent records complaints in the internal complaint register using each state's categories.

What stays with a person?

Filings and corrections. Filing a new form or rate, withdrawing one, or telling a state that an unapproved version was used, is a regulatory act signed by responsible people.

Exam responses. Every response to examiners is reviewed and sent by the insurer's exam coordinator. An inaccurate response creates its own finding.

Unfair discrimination conclusions. Testing can show differences in outcomes. Deciding whether a difference is actuarially justified or unfairly discriminatory, and what to change, is a judgement for actuaries, compliance and counsel.

Claims decisions and remediation. A compliance agent tests claims; it never pays, denies or reopens them. Deciding to remediate customers belongs to people.

Which US rules apply?

There is no single federal AI law in the United States, and insurance is primarily state-regulated. The wider view is in how AI agents are regulated in the United States.

State insurance regulators, coordinated by the NAIC, set rules on filings, market conduct, claims and the governance of AI and external data. Where a state has adopted the NAIC's AI guidance, it expects a governance programme covering AI systems used in decisions affecting consumers. An agent used in compliance belongs in that programme's inventory.

NYDFS supervises insurers licensed in New York and has set specific expectations for external data and AI in underwriting and pricing.

Colorado has passed an AI act aimed at high-risk systems that make consequential decisions, which can include insurance decisions.

GLBA governs the privacy of consumers' financial information held by insurers. HIPAA applies to health plans. State privacy laws such as California's CCPA, as amended by the CPRA, can add duties.

NIST AI Risk Management Framework. Voluntary, but a familiar structure for the governance programme states expect.

Cross-border. Carriers with European operations will meet the EU AI Act there; see the EU AI Act and AI agents in insurance claims.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

How do you start in the first 90 days?

Month one. Add the compliance agent to your AI governance inventory with its purpose, owner and data sources. Start with form and rate reconciliation in your largest three states for one line.

Month two. Replay the agent against a past period in which your team found and corrected mismatches. Check that it finds them all, and resolve any extra findings.

Month three. Run monthly reconciliation, reviewed by the filings team, and extend to more states. Use the agent to rehearse a mock market conduct data call. US payment firms answer to a different mix of federal and state regulators; see compliance agents in US payments. The guide to AI compliance agents explains why the agent stays second line.