This is what an insurer receives after an AQE assessment: a certificate with a verdict, and an evidence book showing every answer and finding behind it. The example is a London-market MGA writing under a binding authority. It is about to introduce an AI model that triages home and SME property claims at first notification of loss and flags possible fraud, used by its own claims team and its delegated claims administrator. A CLEARANCE sample shows the check on the AI the same firm already has live, and a US insurance sample is also available.
The claims model may go ahead within its assessed scope. Fifteen required actions must be completed before it can be fully qualified, and the board has not yet been told about the deployment.
Reference AQE-3DD9A272 · UK jurisdiction · Framework 2.0.4 · Rules 2026-02
Exposure: high. The model recommends how each claim is handled and handlers rarely override it, across the claims department.
Control: strong. A named owner can stop the system, but the board has not yet been told about it.
Named accountable owner: Oliver Grant, Head of Claims (fictional).
The verdict comes from six answers. The same answers, assessed under the same framework version, always produce the same verdict.
| Question | Answer |
|---|---|
| Is someone officially in charge of this AI system? | Yes |
| Can that person stop or pause it if something goes wrong? | Yes |
| Does senior leadership or the board know about it? | No |
| How much does the AI decide on its own? | Recommends, rarely overridden |
| How widely will it be used? | Department |
| Deployment-blocking governance signals found | None |
24 questions across five areas, each scored out of 10. An area passes without conditions at an average of 7 or above. All five fall short, and each comes with required actions in the evidence book. Risk and impact assessment for AI and staff training are the lowest-scoring answers.
The dark line on each bar marks the pass level of 7.
Findings point to the obligations they relate to. They are not legal advice and are not a finding that the firm is in breach of anything. FCA Consumer Duty is cited because the firm declared itself as financial services.
| Framework | What it covers | Status |
|---|---|---|
| UK GDPR Article 22 | Automated decision-making affecting individuals | Review |
| UK GDPR Article 35 | DPIA required for high-risk AI processing | Review |
| FCA Consumer Duty | AI outputs must demonstrably serve customer interests | Review |
| EU AI Act Annex III | High-risk classification assessment | Not assessed |
AQE uses fixed, version-controlled rules. There is no AI model and no assessor judgement in the decision, so the same inputs always give the same verdict.
Each report carries two fingerprints. The first identifies the exact ruleset used, and the second the decision it produced. Recomputing them from the inputs confirms nothing was changed.
Ruleset deed06cda84c0b38…
Decision a32ef477cc5acb11…
Both documents are marked as samples on every page.