Get started
Insurance

Why AI Agent Insurance Will Be a $10B Market

8 March 20268 min read
Abstract balance scale in amber weighing data blocks against a shield

Insurers are circling the AI agent opportunity. But they cannot price what they cannot measure. The market that solves the evidence problem wins the decade.

The signals are everywhere

Three moves in the past twelve months tell the same story: institutional capital believes AI agent liability is an insurable risk, and the first movers are positioning now.

SignalMoveDetail
AIUC$15M seed roundLed by Nat Friedman (ex-GitHub CEO)
Lloyd's of LondonAI Working GroupRisk assessment frameworks for autonomous systems
Armilla AIPerformance WarrantiesModel failure guarantees backed by underwriters

The actuarial void

Every insurance product in history has been priced on loss data. Fire insurance drew on centuries of building fire records. Motor insurance was built on decades of accident statistics. Cyber insurance, the most recent category, still took years of breach data before underwriters could construct credible models.

AI agent insurance has none of this. There is no historical loss data for autonomous software agents making decisions, calling APIs, moving money, and modifying infrastructure on behalf of organisations. The actuarial tables are blank. Fire insurance has 300+ years of loss data, motor insurance has 100+ years, cyber insurance has 15+ years. AI agent insurance has zero.

This is not a temporary gap. It is a structural problem. Without a standardised way to record what agents do, how they were governed, and what happened when things went wrong, the data will never accumulate in a form underwriters can use.

The telematics parallel

Motor insurance faced a version of this problem in the early 2000s. Insurers had aggregate accident statistics, but they could not distinguish a careful driver from a reckless one until after the claim. Young drivers were penalised uniformly. Safe drivers subsidised dangerous ones.

Telematics changed everything. OBD-II dongles and smartphone sensors gave insurers real-time behavioural data: braking patterns, cornering speed, time-of-day driving, phone usage. Suddenly, underwriters could price individual risk based on observed behaviour rather than demographic proxies.

AI agent insurance needs the same transformation. Not demographic proxies (which LLM, which vendor, which industry), but direct behavioural evidence: what the agent actually did, what governance controls were active, and whether the operator can reconstruct any incident from first principles.

Auto insurance
  • OBD-II Dongle
  • Driving behaviour
  • Individual risk score
  • Accurate pricing
AI agent insurance
  • VOLT Evidence Chain
  • Agent behaviour
  • Individual risk score
  • Accurate pricing

The analogy is precise. OBD-II gave auto insurers behavioural telemetry. VOLT gives AI insurers behavioural evidence. The operator who can prove their agent followed policy is the one who gets the better premium.

What underwriters actually need

Conversations with insurance professionals and analysis of early-stage AI insurance products reveal three non-negotiable requirements. Every underwriter asks the same questions, regardless of whether they frame them in actuarial language or plain English.

#RequirementWhat it means
1Evidence of actions, not logsUnderwriters need tamper-evident records of what the agent actually did. Application logs are assertions by the operator. They can be edited, filtered, or deleted. What insurers need is cryptographic proof: hash-chained event records that cannot be retroactively modified without detection.
2Proof of governance controlsIt is not enough to say governance was in place. Underwriters need evidence that specific controls were active at the time of each decision: spending limits, human approval thresholds, scope restrictions, safety checks. The policy must be provably enforced, not merely documented.
3Incident reconstruction capabilityWhen a claim arrives, the underwriter needs to reconstruct exactly what happened. Not a summary, not an explanation from the operator, but a complete, verifiable chain of events from trigger to outcome. If you cannot replay the incident, you cannot adjudicate the claim.

Sizing the market

Conservative modelling puts the AI agent insurance premium pool at £1.2 to £2.1 billion by the end of the decade, assuming 3 to 5% penetration of AI agent operational spend. When you add the surrounding ecosystem (evidence infrastructure, compliance tooling, certification services, claims management platforms, reinsurance), the total addressable market reaches £6.5 to £8 billion.

Projected market by 2030

$1.5B–$2.6B
Premium pool (3-5% penetration)
$8B–$10B
Total ecosystem (incl. infrastructure, compliance, claims)

Evidence infrastructure is the enabling layer. Without it, the premium pool cannot form. The company that owns the evidence substrate captures value from every layer above.

Adverse selection and the evidence gap

Insurance markets fail when they cannot distinguish good risks from bad ones. This is the adverse selection problem, and it is acute in the AI agent space.

Without standardised evidence infrastructure, insurers face a binary choice: insure everyone at high premiums (pricing out responsible operators) or insure no one (leaving the market to self-insurance and contractual liability caps). Neither outcome is efficient. Neither builds a market.

The operators who invest in evidence infrastructure, proper governance controls, and incident reconstruction capability are exactly the ones insurers want to underwrite. But without a way to verify those investments, the careful operator pays the same premium as the reckless one.

Traditional logs
  • 2026-03-08 INFO Agent started
  • 2026-03-08 INFO Action taken
  • 2026-03-08 ERROR Failure (deleted after the fact)
  • 2026-03-08 INFO All normal
  • Editable, deletable, filterable
VOLT evidence chains
  • #1 a1b2c3 → Agent started
  • #2 d4e5f6 → Action taken
  • #3 g7h8i9 → Error occurred
  • #4 j0k1l2 → Recovery step
  • Tamper-evident, hash-chained, verifiable

The evidence substrate

This is the problem VOLT and AOCL were designed to solve. Not as an afterthought or a compliance add-on, but as the foundational infrastructure layer that makes AI agent insurance viable.

VOLT provides the evidence chain: every agent action, every API call, every decision recorded in a tamper-evident hash chain. If an entry is modified or deleted, the chain breaks. The evidence is not an assertion by the operator. It is a cryptographic fact.

AOCL provides the governance proof: an 11-layer pipeline that enforces spending limits, human approval thresholds, scope restrictions, and safety checks. Every decision passes through the pipeline, and every governance verdict is recorded in VOLT. The underwriter does not need to trust the operator's claims about their governance posture. They can verify it.

Together, they satisfy all three underwriter requirements. Evidence of actions (VOLT chains). Proof of governance controls (AOCL verdicts in VOLT). Incident reconstruction (full chain replay from any point).

RequirementProtocolMechanism
Evidence of actionsVOLTHash-chained event records
Governance proofAOCL11-layer pipeline verdicts
Incident reconstructionVOLT + AEEFull chain replay with envelopes

The SOC 2 trajectory

Consider the parallel with SOC 2 compliance. Twenty years ago, cloud providers competed on features and price. Security posture was invisible. Then SOC 2 emerged as a standardised framework: auditors could verify controls, and customers could compare providers on a common basis.

SOC 2 did not just help buyers. It helped sellers. The providers who invested in security could finally prove it, differentiating themselves from competitors who merely claimed to be secure. Compliance became a competitive advantage, not just a cost centre.

AI agent evidence infrastructure is on the same trajectory. The operators who adopt VOLT-compatible evidence chains now will be the ones who get insurable first, at the best rates. As the market matures, evidence infrastructure will shift from differentiator to table stakes, exactly as SOC 2 did for cloud infrastructure.

Certification tiers

To make evidence infrastructure legible to insurers, we are designing a tiered certification framework. Each tier represents a progressively stronger evidence posture, giving underwriters a clear signal for risk pricing.

TierNameWhat it meansStatus
PlatinumVOLT-EnterpriseFull stack with external attestation, multi-party signing, real-time streaming to reinsurersPLANNED
GoldVOLT-AttestedWARD witnessing active, AOCL governance verified, third-party audit trail
SilverVOLT-VerifiedTamper-evident chains with hash verification, governance policy enforcement
BronzeVOLT-CompatibleBasic event recording in VOLT format, structured envelopes via AEE

Certification framework planned for v1.0. Tier definitions will align with the VOLT, AOCL and WARD open specifications.

Who wins this market

The AI agent insurance market will not be won by the insurer with the best marketing or the largest balance sheet. It will be won by whoever controls the evidence layer.

This is not speculation. It is the pattern every insurance category follows. The company that standardises risk measurement captures the market. Verisk did it for property/casualty with actuarial data. Fair Isaac did it for consumer credit with FICO scores. The telematics providers did it for usage-based auto insurance.

For AI agent insurance, the evidence substrate is the prize. The protocols that become the standard for recording agent behaviour, proving governance compliance, and enabling incident reconstruction will sit at the centre of a multi-billion pound market.

That is what we are building with VOLT, AOCL, and AEE. Not an insurance product. The infrastructure that makes AI agent insurance possible.

Built for regulated industries

Compliance Suite ships with VOLT audit trails, WARD receipts, and AOCL policy enforcement. Self-hosted, air-gapped, yours.