Insurance AI rules
The December 2023 NAIC Model Bulletin addresses insurers and expects written AI governance, risk controls, and oversight of third-party systems and data. By August 31, 2026, 25 states and DC had adopted it. Agencies should expect carrier questions and ask what each carrier requires.
State insurance authorities enforce GLBA privacy. NAIC Model Law 668 applies to licensees, including producers; 28 jurisdictions had adopted it by August 2025. Small-licensee exemptions from a written program do not remove event-investigation and reporting duties. State versions differ.
Documented coverage
| What staff paste | What Sentinel does |
|---|---|
| Social Security number | Replaced |
| Email address, phone number | Replaced |
| Credit card, bank account number | Replaced |
| Driver's license number | Replaced when a label sits next to it, such as "Driver's license:" |
| VIN | Replaced when labeled |
| Date of birth | Replaced when labeled |
| Policy number | Not in the list. Use [POLICY_NO] |
| Client name, street address | Passes through. Use [INSURED] |
| Any unlabeled number | Passes through |
Each value it catches becomes a placeholder, REDACTED by default. An admin can change the replacement text, or block the request instead.
For each request Sentinel records metadata only: counts, which rule fired, and latency. Prompts and responses are never sent to SUPERWISE.
Try your own formats in the demo with made-up values before relying on one.
Use [INSURED], [POLICY_NO], and [CARRIER], work from the specimen form, and restore real details after the answer.
Production use, up to 5 Sentinels, for example one each for HR, accounting, and engineering. Each protected PC is one Sentinel.
A 50-person agency on its own PCs: 10 Business plans, $500 a month. 30 days free, no credit card for Sentinel.
For a team gateway in your own cloud, talk to us about Enterprise.
Explore AI governance insights, platform resources, implementation guidance, and customer stories.