EIOPA's February 2026 AI Survey. What the results mean for enterprises seeking coverage.

What the EIOPA February 2026 survey found

The European Insurance and Occupational Pensions Authority conducts periodic surveys of the European insurance sector on AI adoption and governance. The February 2026 survey, covering a representative sample of European insurers across life, non-life, and composite business, produced findings that are instructive for enterprises on both sides of the AI liability equation: those that use AI and want to insure it, and those that write insurance and need to understand the risk they are covering.

On the use of AI within insurance organisations themselves, the survey found that approximately two-thirds of respondents were using generative AI in some operational capacity. The functions most commonly affected were customer communications, document processing, underwriting support, and claims handling. However, the survey found that the overwhelming majority of these deployments remained at proof-of-concept or pilot stage rather than full production with consequential decision authority. Most insurers described their AI posture as exploratory rather than operational at scale.

This finding has a direct implication for enterprises seeking AI liability coverage. A European insurer that has not yet taken its own AI deployments beyond pilot stage is unlikely to have developed the actuarial models, risk assessment frameworks, and underwriting criteria needed to price AI liability for external clients with confidence. The insurer's own AI governance journey and its development of AI liability products for the market are progressing on parallel tracks, both at an early stage.

The gap between enterprise demand and European insurer readiness

Across the globe, demand for AI liability coverage is being driven by enterprises that have deployed AI agents in consequential roles and are beginning to understand the exposure they have created. The US market has moved first: AIUC launched with a $15 million seed round in mid-2025, Munich Re's aiSure division is actively writing AI performance policies, and Armilla expanded its coverage limits to $25 million per company in January 2026. ElevenLabs became the first company to insure its AI voice agents in February 2026, modelled explicitly as employees.

The European market is forming more slowly. The EU AI Act creates a compliance deadline rather than an immediate litigation shock. European enterprises are managing the compliance question first and the coverage question second. This sequencing means that European demand for AI liability coverage is building toward the August 2026 enforcement date but has not yet peaked. European insurers reading the EIOPA survey data are making the rational calculation that the market will form, but they have time before the peak.

The result is a gap. Enterprise demand is building. Insurer product readiness is developing. Between those two curves, enterprises seeking coverage in mid-2026 will find a market that is more constrained than the US equivalent. This is not a reason to delay. It is a reason to build the documentation that will make an enterprise coverable when products become available, rather than waiting and assembling governance records in response to an underwriter's questionnaire under time pressure.

What EIOPA's governance opinion requires of European insurers

EIOPA's August 2025 opinion on artificial intelligence governance in the insurance and occupational pensions sectors is a supervisory statement, not a binding regulation. But supervisory statements from EIOPA carry practical force because they define how the Authority expects national competent authorities to interpret existing binding requirements (Solvency II, IDD, DORA, GDPR) when applied to AI systems.

The opinion establishes that European insurers must apply the same governance standards to AI systems that they apply to other material risk systems. This covers four areas. First, risk management: AI systems used in consequential functions must be subject to documented risk assessment, validation, and approval processes consistent with the insurer's existing risk management framework. Second, model validation: AI models used in underwriting, pricing, or claims must be validated with the same discipline as actuarial models, with documented validation reports and defined re-validation triggers. Third, explainability: decision support AI must be explainable to the standard necessary to comply with policyholder explanation rights under IDD and GDPR. Fourth, accountability: there must be clear ownership of AI systems at the senior management level, with defined escalation paths when AI-driven decisions produce unexpected outcomes.

This internal governance requirement shapes how European insurers will approach AI risk assessment for clients. An insurer whose own AI governance follows EIOPA's framework will use the same conceptual toolkit when evaluating an enterprise client's AI governance documentation for underwriting purposes. This creates a practical alignment: enterprises that have built governance documentation consistent with the EIOPA framework will present evidence that European underwriters are equipped to evaluate.

What the major players are planning for H2 2026

Based on publicly available statements and market intelligence, the AI liability coverage landscape in Europe for H2 2026 is expected to take the following shape.

Munich Re's aiSure division, which has been writing AI performance policies globally since 2018 and LLM coverage since 2019, is the most likely first mover for structured AI liability coverage in the European enterprise market. aiSure uses a parametric-style approach: coverage triggers on measurable performance deviations rather than a lengthy liability investigation. This model requires actuarial data on the deployer's system performance, which connects directly to the monitoring records that the EU AI Act's Article 26(3) and Article 72 require. An enterprise with a monitoring record can supply the performance data that aiSure's coverage model depends on.

Armilla, the Lloyd's of London coverholder that raised $25 million in January 2026, has announced that it is extending its coverage to include EU AI Act regulatory violations. This is a significant product development for the European market. Armilla's existing model requires enterprises to provide governance documentation before coverage is written. The Trustible partnership they announced in 2025 for North American clients demonstrates their model: a governance platform produces the documentation, and Armilla writes the coverage. The European equivalent of this model, when it arrives, will require governance documentation that maps to EU AI Act requirements specifically.

The Lloyd's market has been circulating draft AI endorsements for consultation among syndicates and managing agents. These endorsements, which would extend existing professional liability and technology errors and omissions policies to cover AI-specific losses, are expected to reach the market in Q3 2026. The endorsements are likely to follow the AIUC-1 structure in requiring governance documentation as a condition of coverage.

European domestic carriers (Allianz, AXA, Zurich, Generali) have not yet announced dedicated AI liability products as of May 2026. Their entry into the AI liability market is more likely in 2027, once the enforcement landscape has crystallised and actuarial data from the first year of claims is available.

What enterprises should build now

The coverage market for European enterprises is forming around a predictable set of underwriting requirements, which are simultaneously the compliance requirements of the EU AI Act. Building compliance documentation and building an insurance submission are the same activity if approached correctly.

Four document categories are consistently required across all the emerging AI liability products. First, technical documentation: the Annex IV documentation received from the AI provider, covering system design, training data governance, testing results, and known limitations. Second, monitoring records: documented evidence that the system was monitored in production, what was found, and how incidents were handled. Third, governance evidence: a description of the oversight structure, the personnel responsible for the system, their training and authority, and the escalation process. Fourth, incident documentation: a record of any incidents involving the system, their nature, their handling, and their resolution.

Enterprises that have these four categories of documentation assembled before they approach a European insurer in Q3 2026 will be presenting the equivalent of a completed underwriting questionnaire. The insurer's assessment work is largely done. This position creates pricing leverage, accelerated underwriting timelines, and a higher probability of obtaining coverage at the first available product launch.

For the regulatory documentation requirements that feed this insurance preparation, see the Article 26 deployer obligations guide on agentliability.eu. For the certification framework that structures this documentation systematically, see the Agent Certified methodology.

Frequently asked questions