Dec 1, 2025
Why Most Compliance AI Gets It Wrong... and how to get the fundamentals right
Without a granular, cross-framework governance model, percentage-based assessments risk creating a false sense of security while leaving supervisory expectations unmet.

Anna-Karin Toresson Weigel
CEO
Solvance’s approach to compliance is built around supervisory expectations:
that an insurer must demonstrate not only documented compliance, but a coherent, traceable and operational governance structure capable of sustaining long-term regulatory adherence.
Many AI tools on the market focus on analysing individual reports and producing a numerical compliance score. While this may add value for document-driven frameworks, it does not meet the requirements of governance- and risk-based regimes such as Solvency II, DORA, IRRD, IDD, GDPR or the AI Act.
These frameworks are fundamentally about how the organisation is structured, not about what is written in a single report.
A report-based AI review can confirm whether a topic is mentioned. It cannot assess whether decision-making, controls, processes, escalation paths, key functions and responsibilities are designed in a way that meets regulatory intent. Nor can it analyse how regulatory requirements interact across frameworks.
Solvance therefore begins with the regulations themselves. Each framework is broken down, article by article, and analysed across governance dimensions: roles, functions, processes, decision bodies, policies, controls and data needs. This yields a fully traceable model of what is required operationally, not only formally.
Because this model is built at regulatory-granularity, it enables insurers to:
• identify overlaps, contradictions and gaps across regulatory clusters
• test organisational changes against all regulations simultaneously
• understand supervisory expectations at structural rather än document-level
• anchor responsibilities and controls in a way that is defensible toward supervisors
The analysis is always customised to the insurer’s actual organisation and risk profile, ensuring alignment with the company’s governance structure, business model and risk strategy.
Importantly, Solvance requires no system integrations, making it possible to digitalise governance without operational risk or IT dependency, a key concern for risk and compliance functions.
Simpler AI tools can add value only after this foundation is in place.
Without a granular, cross-framework governance model, percentage-based assessments risk creating a false sense of security while leaving supervisory expectations unmet.
Solvance’s ambition is therefore not to replace lighter AI tools, but to provide the digital governance foundation required for sustainable compliance, effective internal control and AI-readiness.
It is this structure that enables insurers to meet both current regulatory requirements and future expectations as AI becomes integrated into governance and risk management.


