Industry · Insurance
AI program evidence for carriers under the NAIC bulletin.
The NAIC Model Bulletin is in effect in 24 states and DC, Colorado's Reg 10-1-1 reached auto and health insurers in July 2026, and New York, Texas, and Connecticut add their own layers. Meilynx produces the runtime evidence for the LLM and agent slice of an AIS Program, organized the way a market-conduct examiner asks for it.
Four questions every insurance examiner asks about AI.
Market-conduct examination is the reflex. These are the requests the evidence has to answer.
01
An AI Systems inventory
Which AI Systems make or support regulated decisions, and which third-party providers sit behind them. The bulletin's Section 3 expects it; Section 4 asks for it on examination.
02
Protection of non-public information
What consumer data reaches an AI System and what comes back. Model #668 and the state privacy layers expect an answer that is observed, not asserted.
03
Change control and human review
Proof the approved controls were in force, that configuration did not drift, and that a person reviewed consequential decisions where Texas and Colorado require it.
04
Section 4 production
The written program, testing, third-party diligence, and state filings, produced on request with the evidence scope stated for each item.
Named regulations, with a control mapping for each.
Presets ship in the product for each framework below. Each page walks the requirement, the Meilynx control, and the artifact.
Evidence in your regulator's vocabulary.
Predictive models used in rating and underwriting run outside the proxy path unless they call an LLM. Unfair-discrimination testing, the written AIS Program, notices, and state filings are insurer acts, attested in the package and never performed by Meilynx.
In the package
- AI System inventory and third-party provider list from traffic
- Nonpublic-information findings by system and provider
- Drift findings, configuration-integrity verdict, and enforcement-continuity evidence
- A Section 4 examination crosswalk from each request item to where it is answered
Who we work with
Who reads the evidence
Insurance and the proxy.
Does this make us compliant with the bulletin or Reg 10-1-1?
No runtime product could. Meilynx substantiates from live traffic which AI Systems run and through which providers, what nonpublic information reaches them, whether their configuration changed, and a tamper-evident record of AI-supported decisions. Everything else is marked as attested, and the crosswalk says which is which.
Which states are covered?
The NAIC bulletin is the primary citation on every control. Colorado Reg 10-1-1, New York DFS Circular Letter 7, Texas Bulletin B-0003-26, and Connecticut MC-25 ride as secondary citations where they diverge. The framework page lists each with its effective date.
What about NYDFS Part 500 and the EU AI Act?
Both stay with their own presets. A New York domestic insurer typically activates the insurance pack alongside NYDFS 500; a carrier with EU pricing operations adds the EU AI Act preset for the Annex III insurance-pricing entry.
See the evidence on your own traffic
A 15-minute walkthrough of inline enforcement, the audit chain, and the examination package.