--- url: 'https://qubit.capital/blog/insurance-compliance-covenant-management' title: 'Insurance Compliance for Insurtech Startups: Licenses, Capital and State Rules' author: name: Kshitiz Agrawal url: 'https://qubit.capital/blog/author/kshitiz' date: '2026-03-31T11:29:00+05:30' modified: '2026-10-01T17:55:42+05:30' type: post categories: - Industry-Specific Insights image: 'https://qubit.capital/wp-content/uploads/2026/10/insurance-compliance-covenant-management-banner.webp' published: true --- # Insurance Compliance for Insurtech Startups: Licenses, Capital and State Rules Table of Contents - [Key Takeaways](#key-takeaways) - [Which License Your Insurtech Needs](#which-license-your-insurtech-needs) - [How Much Capital Regulators Expect](#how-much-capital-regulators-expect) - [Getting Licensed State by State](#getting-licensed-state-by-state) - [Ongoing Insurance Compliance After Launch](#ongoing-insurance-compliance-after-launch) - [Covenants You Sign with Carriers, Lenders and Investors](#covenants-you-sign-with-carriers-lenders-and-investors) - [Outside the US](#outside-the-us) - [Where to Start](#where-to-start) ## Key Takeaways - Your license depends on whether you carry the risk, sell it, or only supply software. - A carrier must hold capital above a risk-based minimum. Below 200% of the control level, regulators step in. - In the US each state licenses you separately, so expansion is a filing plan, not one approval. - Compliance continues after launch: annual statements, rate and form filings, market conduct exams and AI rules. Insurance compliance for an insurtech starts with one question: will you carry the risk yourself? A carrier needs a certificate of authority and regulatory capital in every state it writes in. An agency or managing general agent needs producer licenses, and a pure software vendor usually needs neither. Insurtech regulation in the US sits with state insurance departments, not a federal agency. This page covers the license routes, the capital rules, state approvals, and the obligations that start after launch. ## Which License Your Insurtech Needs Three routes cover most insurtech startups. Each carries a different compliance load and a different capital bill. - **Carrier.** You issue policies, hold the risk, and need a certificate of authority plus capital in each state. It is the heaviest and slowest route. - **Managing general agent (MGA) or agency.** You sell, and often underwrite, on a licensed carrier’s policy forms, known as its paper. You need producer licenses and a carrier contract, but no insurer capital. - **Technology vendor.** You sell software to insurers and never touch premiums or policies. Your exposure comes through your clients’ vendor and data rules. Most founders start as an MGA because it gets a product to market without insurer capital. The trade is dependence: the carrier can change terms or pull capacity at renewal. Sagar Agrawal, co-founder of [Qubit Capital](https://qubit.capital), puts the choice this way: > “Pick the license route before you pick investors. An MGA raise and a carrier raise are different companies, with different cap tables.” A carrier plan needs a far larger first raise. The capital must sit on the balance sheet before the first policy is sold. An MGA plan spends its money on distribution and the carrier relationship instead. ![Insurtech License Routes: Carrier vs MGA vs Tech Vendor](https://qubit.capital/wp-content/uploads/2026/10/which-license-your-insurtech-needs_a19.webp) ## How Much Capital Regulators Expect A carrier must hold capital above a statutory minimum set by risk-based capital rules. The formula weighs two things: the insurer’s size and how risky its assets and operations are. Regulators compare the capital you hold with a control level the formula produces. At or above 300% of that level, no action follows. [Below 200%](https://content.naic.org/insurance-topics/risk-based-capital), steps run from a required plan to a takeover of management, and below 70% a takeover is mandatory. Startup carriers plan well above these lines, since one bad claims year eats capital fast. Each state also sets its own minimum capital and surplus for a new insurer. That money is raised before the first policy, which shapes [how you fund an insurance startup](https://qubit.capital/blog/how-to-secure-funding-insurance-startups-challenges). An MGA avoids this bill because the carrier’s capital backs the policies. Fronting sits between the two routes. A licensed carrier issues the policies and passes most of the risk to reinsurers or other capital providers. ## Getting Licensed State by State US insurance is regulated state by state under the [McCarran-Ferguson Act](https://www.multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=United+States&GuideSection=586). There is no national insurance license, so each state you sell in approves you separately. Carriers apply for a certificate of authority through the NAIC’s [uniform application](https://content.naic.org/industry/ucaa). It uses one set of forms, but each state still reviews the file and decides on its own timetable. MGAs and agencies need a producer license in their home state and in each state where they sell. Rates and policy forms also go to each state for filing, and some states must approve them before use. Order your states by how simple your product is to approve there, not only by demand. Investors will check this plan, and the licenses behind it, in [their due diligence on an insurance startup](https://qubit.capital/blog/insurers-audits-vc-due-diligence). ## Ongoing Insurance Compliance After Launch Insurtech compliance does not end at the license. Carriers file annual financial statements, and state regulators run market conduct exams on how you sell, price and pay claims. AI now draws its own scrutiny. The NAIC is rolling out its [AI model bulletin](https://content.naic.org/insurance-topics/insurtech) through the states. Regulators are also working on ways to test insurers’ models for accuracy, fairness and bias. Startups whose pitch rests on [AI-driven underwriting](https://qubit.capital/blog/ai-driven-underwriting-predictive-analytics-winning-capital) should expect the same questions from investors. Privacy law applies on top: state privacy rules in the US, and GDPR for any European customers. Give one person ownership of filings, renewals and exam requests. Keep every due date in one calendar. ![Insurtech Compliance Obligations After Licensing](https://qubit.capital/wp-content/uploads/2026/10/ongoing-insurance-compliance-after-launch_a16.webp) ## Covenants You Sign with Carriers, Lenders and Investors Compliance also covers the promises in your contracts, which is where covenant management comes in. An MGA’s agreement with its carrier usually sets underwriting guidelines, loss limits and audit rights. Loans and venture debt add financial covenants and often require you to [keep specific insurance in force](https://qubit.capital/blog/maintaining-insurance-startup-policies). Breaking one can let the lender call the loan, even when the business is sound. Investors add their own terms at the term sheet, from information rights to [insurance covenants founders can negotiate](https://qubit.capital/blog/insurance-covenants-term-sheets). Track every covenant in the same calendar as your regulatory dates, so one owner sees all of them. ## Outside the US Other markets license insurers nationally, and several run sandboxes for new models. Australia’s enhanced regulatory sandbox lets eligible firms test some financial services and credit activities without a license for [up to 24 months](https://asic.gov.au/for-business/innovation-hub/enhanced-regulatory-sandbox/). The UK’s Financial Conduct Authority runs its own sandbox. In the EU, Solvency II lets smaller insurers apply its governance and reporting rules in proportion to their size and risk. ## Where to Start Decide your license route first, because it sets your capital needs, your state plan and your raise. Then map the states, the filings and the covenants into one calendar with one owner. Qubit Capital’s [insurance startup financing services](https://qubit.capital/industries/insurance) connect insurtech founders with investors who understand regulated models. Keep your filings moving while our team runs your raise.