InsurTech Licensing: Offshore and Onshore Options for Insurance Innovation

InsurTech companies sit at the intersection of technology innovation and one of the most heavily regulated industries in the world. Unlike banking or payments, where fintech licensing regimes have matured rapidly, insurance regulation remains anchored in frameworks designed for traditional carriers. Navigating these frameworks requires understanding the full range of options: from full insurance licences to managing general agent (MGA) arrangements, protected cell companies, and regulatory sandboxes.

Insurance Licensing Models for InsurTech

Full Insurance Carrier Licence

A full insurance licence authorises the entity to underwrite risk, issue policies, and pay claims. This is the most comprehensive — and most capital-intensive — option.

Capital requirements vary by jurisdiction and class of insurance:

• Bermuda: Class 1 (single-parent captive): USD 120,000 minimum; Class 3A (commercial insurer): USD 1 million minimum statutory capital and surplus. The Bermuda Monetary Authority (BMA) applies a risk-based capital framework that may require significantly more
• UK (PRA): The Prudential Regulation Authority requires Solvency II compliance with Minimum Capital Requirement (MCR) starting at EUR 2.5 million for non-life insurers and Solvency Capital Requirement (SCR) calculated using the standard formula or an internal model
• Gibraltar: Minimum Guarantee Fund of EUR 2.5 million for non-life classes (under Solvency II as applied in Gibraltar post-Brexit). Gibraltar-licensed insurers previously passported into the EU; post-Brexit, the Temporary Permissions Regime (TPR) allows continued UK access
• Isle of Man: The Insurance Authority applies risk-based capital requirements. Minimum capital: GBP 250,000 for non-life insurers, but practical requirements are typically higher

Managing General Agent (MGA)

An MGA is authorised by a licensed insurer to underwrite risks, bind coverage, and handle claims on behalf of the carrier. The MGA does not carry insurance risk on its own balance sheet.

Advantages for InsurTech:

• No insurance licence required (the MGA operates under the carrier's licence)
• Significantly lower capital requirements — typically the MGA needs only working capital
• Faster time to market: an MGA arrangement can be operational in 3 to 6 months
• The InsurTech can focus on technology, distribution, and customer experience while the carrier manages reserving, capital, and regulatory compliance

Disadvantages:

• The MGA is dependent on the carrier for capacity, pricing authority, and claims authority
• Commission-based economics: the MGA earns a percentage of gross written premium (typically 15% to 35%) rather than capturing the full underwriting margin
• Carrier can terminate the arrangement, creating business continuity risk

Regulatory position: In the EU, MGAs must comply with the Insurance Distribution Directive (IDD, Directive (EU) 2016/97). In the UK, MGAs are regulated by the FCA as insurance intermediaries. In most offshore jurisdictions, MGAs require insurance intermediary or broker registration.

Protected Cell Company (PCC)

A PCC allows multiple insurance businesses to operate within a single legal entity, with assets and liabilities of each "cell" legally segregated from the others and from the core company.

Use case for InsurTech: A PCC allows an InsurTech to operate its own cell within a licensed carrier's PCC structure, effectively gaining insurance capacity without a full licence.

Key jurisdictions:

• Guernsey: The Protected Cell Companies Ordinance 1997 was the first PCC legislation globally. Guernsey remains the leading PCC jurisdiction for insurance
• Gibraltar: Companies (Protected Cell) Act 2001
• Malta: Cell Companies legislation under the Companies Act
• Bermuda: Segregated Accounts Companies Act 2000

Capital requirements: Typically USD 100,000 to USD 500,000 per cell, compared to USD 1 million+ for a standalone licence.

Regulatory Sandbox

Several jurisdictions operate insurance regulatory sandboxes that allow InsurTech companies to test innovative products under relaxed regulatory conditions:

• UK (FCA): The FCA Regulatory Sandbox allows firms to test innovative insurance products with real customers for up to 12 months, with modified regulatory requirements
• Singapore (MAS): The MAS Sandbox Express programme provides pre-defined regulatory conditions for specific insurance activities
• Abu Dhabi (ADGM): The RegLab allows insurance innovation testing with modified capital and licensing requirements
• Bermuda (BMA): The Insurance Regulatory Sandbox facilitates testing of new insurance business models with a streamlined application process

Sandbox participation does not replace the need for a licence — it defers full compliance while the business model is validated.

Jurisdiction Comparison for InsurTech Licensing

Bermuda

Bermuda is the world's leading offshore insurance jurisdiction, with over USD 800 billion in total insurance and reinsurance assets. The BMA is a world-class regulator with Solvency II equivalence recognition from the EU.

Advantages:

• Global credibility and regulatory prestige
• Innovation-friendly: the BMA has established the InsurTech sandbox and streamlined digital applications
• No corporate income tax, no capital gains tax, no withholding tax
• Access to global reinsurance market

InsurTech-specific provisions:

• The BMA's Innovation Hub provides guidance for InsurTech applicants
• Class IIGB (Insurance Innovation General Business) licence designed for small-scale insurers with limited lines, lower capital requirements
• Sandbox allows up to two years of testing

Gibraltar

Gibraltar offers EU-equivalent Solvency II regulation (through its own legislation post-Brexit) and has historically been a favoured jurisdiction for online and digital insurance businesses.

Advantages:

• Corporate tax rate of 12.5%
• English-speaking, English law jurisdiction
• Strong regulatory expertise in digital distribution models
• Access to UK market through the Temporary Permissions Regime (transitioning to a permanent framework)

For InsurTech: Gibraltar has licensed numerous online-first insurers and InsurTech MGAs. The Gibraltar Financial Services Commission (GFSC) is experienced with technology-driven business models.

Isle of Man

The Isle of Man has a well-established insurance sector regulated by the Insurance and Pensions Authority under the Insurance Act 2008.

Advantages:

• 0% corporate tax rate (standard rate)
• Experienced regulator with a pragmatic approach
• Access to the UK market through temporary and permanent frameworks
• Protected Cell Company legislation available

Costs: Total first-year cost for a non-life licence: approximately GBP 250,000 to GBP 750,000 including capital, legal fees, and setup.

Cayman Islands

CIMA regulates insurance under the Insurance Act (as revised). Cayman is primarily used for captive insurance and reinsurance rather than direct-to-consumer insurance.

Use case for InsurTech: Cayman is ideal for InsurTech companies operating reinsurance sidecars, insurance-linked securities (ILS), or parametric insurance products distributed through fronting arrangements.

Parametric Insurance and InsurTech

Parametric insurance — which pays out based on a predefined trigger (e.g., earthquake magnitude, rainfall levels) rather than assessed loss — is a natural fit for InsurTech. Key considerations:

• Regulatory classification: In most jurisdictions, parametric products are classified as insurance contracts if they are designed to indemnify against a loss event. Some jurisdictions may classify certain parametric products as derivatives
• Smart contract execution: Blockchain-based parametric products can automate claims assessment and payout, but the legal enforceability of smart contract execution varies by jurisdiction
• Data oracles: The reliability and independence of the data source (oracle) that triggers payout is a critical regulatory and commercial consideration

Key Takeaways

• Full insurance licences require USD 1 million to USD 10 million+ in capital depending on jurisdiction and insurance class — Bermuda and Gibraltar are the leading InsurTech-friendly jurisdictions
• MGA arrangements allow InsurTech companies to reach market in 3-6 months with minimal capital by operating under a licensed carrier's authorisation
• Protected cell companies offer a middle ground: dedicated insurance capacity at USD 100,000 to USD 500,000 per cell
• Regulatory sandboxes in Bermuda, the UK, Singapore, and ADGM allow business model testing under modified regulatory conditions
• Gibraltar's 12.5% tax rate and digital-first regulatory experience make it particularly attractive for online insurance distribution
• Parametric insurance is a natural InsurTech application but requires careful regulatory classification analysis in each target market