Cytora

Applying the removal test leaves nothing behind. The function of the platform is reading unstructured commercial insurance documents and resolving them into a client authored schema, and that reading is done by large language models pretrained to commercial insurance. No rules engine or workflow product sits underneath that would survive the models being taken out; the client would be left holding a schema definition and an empty queue. Extraction runs seven parallel agents at different temperatures for every field, which is a model architecture rather than a model bolted onto a deterministic system.

Cytora names the mechanism and places it in the execution path rather than asserting that oversight exists somewhere. Every schema field carries a confidence score derived from the degree of agreement between seven independent extraction agents, and a low score routes that field automatically into a human review console. Every extracted value carries a mandatory source list tying it back to the submission content it came from.

Chain of thought output gives a human readable account of why a value was chosen, including the provenance of the candidates considered. The Autopilot agentic capability adds built in approvals and states that every workflow step is auditable. This is the provenance and confidence route to the top grade, the same route intellectai took, with an enforced review trigger sitting on top of it.

This is the best evidenced B on the axis and the reason it stops short of the top grade is worth recording. Cytora holds an ISO 42001 certificate for its artificial intelligence management system, published as a signed certificate document on its own domain rather than asserted in prose, one of a small number of accredited AI management system certifications held anywhere in this index.

In product it exposes per field confidence scores based on inter agent agreement, mandatory source provenance for every extracted value, and chain of thought reasoning. It further states that automated performance monitoring tracks accuracy, precision, recall and F1 scores. Naming recall is unusual and matters: the failure mode in risk intake is the value missed rather than the value flagged, and almost nothing in this index addresses it. What stays ambiguous is who sees those figures.

The claim attaches them to continued autonomous training, which reads as an internal loop rather than a validation pack handed to an institution's model risk function. Under the standing rule that an ambiguous claim earns nothing even when the ambiguity costs a grade, that holds it at B.

Zurich completed a 90 day rollout across five countries and reports digitization accuracy moving from 70 to 80 percent up to 98 percent, intake straight through processing from 10 percent to 95 percent, and manual processing time down by more than 80 percent, with a stated plan to reach more than 20 markets over 16 months. Markel published a 113 percent productivity increase in its underwriting team with managing director Neil Galjaard quoted by name.

Chubb North America transformation officer Amir Farid and Beazley chief operating officer Troy Dehmann are each quoted by name on live deployments. Further named logos include Travelers, Liberty Mutual, Tokio Marine, Ecclesiastical, TransRe, Everest, James River and Arch Insurance. Several named institutions carrying quantified outcomes is the top of this axis.

The ISO 42001 certificate covers governance of the artificial intelligence management system itself and is published in full, which puts Cytora ahead of the index norm on this axis. Consistency is treated as a safety property rather than a performance one: parallel agents at different temperatures are run specifically so that identical submission inputs return identical outputs every time, and confidence scoring exists to trigger review rather than to decorate a dashboard.

The open question is the one this index has put to Clearwater, Feathery and every multi tenant platform, and it is sharper here than usual. Zurich, Chubb, Markel, Beazley, Travelers, Liberty Mutual and Tokio Marine compete with one another and all run submissions through one platform. Whether one carrier's submission flow, appetite configuration or loss experience informs models serving a competitor is unstated, and risk selection is precisely where these carriers compete.

A privacy policy and a cookie policy are published and nothing beyond them was located. No data processing agreement, subprocessor list, retention schedule or lawful basis statement is available publicly. Most of what the platform ingests is commercial risk data about businesses rather than consumer financial data, which lowers the exposure relative to the identity and lending vendors in this index.

The exception is the claims workflow, which ingests first notice of loss and post notification claim submissions, and those routinely carry personal data about individual claimants including injury and loss detail. Nothing describes how that material is handled differently from a property schedule.

Two accredited certifications are published as signed certificate documents hosted on Cytora's own domain and linked from the site footer: ISO 27001 in its 2022 revision and ISO 42001. Publishing the certificate itself rather than a badge or a claim satisfies all four parts of the index credential test and puts Cytora in the top fifth of the index on this axis. Three gaps hold it off the top grade.

No service organisation control report is named, which buyers such as Chubb, Travelers and Liberty Mutual would ordinarily require and which the vendor would therefore be likely to hold. There is no trust centre, no subprocessor list and no penetration testing statement. The footer security link resolves to a dead anchor, so the security page a buyer would go looking for does not exist.

Cytora is a technology supplier to insurers, reinsurers, brokers and managing general agents and holds no insurance licence, which is the correct posture for its shape and carries no penalty here. What is absent is any statement of regulatory position at all. The standing index ruling is that technical conformity assessments do not read across as regulatory standing, so the ISO certifications are credited on the security and model risk axes rather than this one.

No supervised regulator test, sandbox participation or admission to a formal programme was located. Nothing public addresses the vendor's position under the EU AI Act despite a United Kingdom and European base and a product that sits inside insurance risk selection.

Commercial lines underwriting weakens the protected class analysis that drives this axis in consumer credit without removing it, and the state insurance regulator model bulletin on insurer use of artificial intelligence places testing duties on the carrier rather than on the supplier. The ISO 42001 certification implies a documented impact assessment exists, which is more than the silent norm here, but no fairness testing, outcome monitoring or impact assessment summary is published.

One gap is specific and measurable: the platform claims more than 140 languages out of the box with no per language accuracy figure, so a submission arriving in a less represented language may be digitized less accurately than an English one, and the routing and appetite decisions taken downstream inherit that difference.

Public material stops short of describing what happens when the platform reads a submission wrongly. No error rate for the digitization itself is published, and no remediation commitment, liability position or correction path exists for a broker or an insured affected by a misread field. The confidence scoring and human review architecture is a control against the error occurring, which is real and is graded on the oversight axis, but it is not a recourse mechanism after the fact. The party with the least standing is the insured, who never contracts with Cytora and whose submission is being read by it.

Cytora states that the platform is powered by large language models pretrained to commercial insurance, which names the model class and no supplier. No model provider, model family, version or country of processing is disclosed anywhere located. This sits in the ambiguous middle of the pattern observed across this index, where vendors that licence their model capability tend to name suppliers and vendors that call their models proprietary name nothing. Cytora does neither, so a buyer cannot tell whether submission content reaches a third party model provider, which for confidential commercial risk data is the question that decides the answer.

The data side is strong and specifically named. A published data ecosystem carries pre integrated third party risk data providers, with a Moody's Analytics partnership on core risk workflows and an August 2026 GeoX AI integration bringing roof age and vacancy attributes into the platform. Ownership by Applied Systems since 2025 places Cytora inside the Ivans connectivity network that links agencies and carriers in United States property and casualty.

Held off the top grade because the downstream systems that receive decision ready risks are described generically. Federato sets the bar on this axis by naming Guidewire, Duck Creek and Sapiens as native integrations, and no equivalent policy administration list was located here.

Cloud deployment is stated and described as managed, standardised, tested and audited, with access controls said to scale to customer demand. No region list, residency commitment, single tenant option or on premise path was located.

This carries more weight than usual because the flagship reference deployment is explicitly multinational: Zurich runs the platform across five countries and intends to reach more than 20, and several of those markets impose insurance data localisation requirements. A buyer cannot determine from public material where its submissions are processed.

No pricing, tier ladder, billing basis or indicative range is published. The only route to a number is a demo request, which is the index norm and is measured against Sumsub, which publishes per verification rates on a public page. Benefit claims run ahead of cost context: a 30 percent uplift in premium growth and up to three percentage points of loss ratio improvement are asserted with no indication of what the platform costs to achieve them.

Four buyer types are served with dedicated product surfaces: commercial insurers, reinsurers, wholesale brokers and managing general agents. Coverage spans the full transaction set rather than a single workflow, with new business, renewals, mid term adjustments, quotes, policies, invoices, facultative submissions, treaty submissions and claims from first notice of loss onward each carrying out of the box schemas.

Named clients run from global composite carriers through specialty writers to reinsurance. More than 140 languages are supported without configuration, and the Zurich deployment spans five countries with more than 20 planned.