ebir
ES
Entry vertical

AI in insurance in Mexico: the use case to start with and the one to defer

An assistant for the agent network and a first-notice-of-loss agent that gathers, organizes and hands off. It never decides coverage.

CNSF, Condusef and Mexico’s 2025 data protection law

Illustration for Insurance
01 · The use case to start with and the one to defer

High value, available data, no decisions about people

Use case to start with

An assistant for the agent network (coverage, policy conditions, procedures, with a citation to the policy) and a first-notice-of-loss agent that identifies the policy, confirms data already on file, classifies the claim and hands the adjuster an organized summary. It never decides coverage or rejects anything.

Use case to defer

Automated major medical claims decisions and life underwriting: health data in a decision about people. They come in only with a mature governance framework and Legal’s signature.

What is already happening in the sector

AI already takes part in major medical claims review and fraud detection. In May 2026 Mexico’s financial consumer protection agency (Condusef) pointed to “black boxes” with age, location and socioeconomic bias used to deny payments, and insurance complaints rose 8% in the first four months of the year.

02 · Data, regulator and decision

What the committee will review

D

Data the first use case touches

Policies, general conditions, manuals and internal circulars. Personal data is masked; policyholder files are consulted at answer time and never used for training.

R

Regulator and obligation

The Insurance and Surety Institutions Law (LISF, article 268) and the Single Circular for Insurance and Surety (chapter 3.6) extend confidentiality to the vendor, require its express acceptance in the contract and allow the National Insurance and Surety Commission (CNSF) to inspect it, order audits and suspend the service.

Q

Who decides the purchase

Head of operations or claims, with Legal and information security.

E

Deployment option

A: your own hardware, on your site. For business continuity, a second unit.

The three deployment options

03 · Frequently asked questions

What insurance leaders ask

Does an insurer in Mexico need CNSF authorization to hire an AI vendor?

The CNSF defines which third-party services require prior authorization. In every case the contract must include the vendor’s express acceptance, confidentiality extends to the vendor and the Commission can inspect it. With the hardware on your site, data never leaves and the review is simpler.

Why not start with major medical claims decisions?

Because they involve health data, which Mexico’s data protection law treats as sensitive, in a decision about people. The first project starts with a high-value case without automated decisions: the agent network and first notice of loss, which gather, organize and hand off.

Other industries: Financial services · Telecom and media · Fintech and payments · Auto finance

04 · Next step

Discovery sessions, no commitment

With technology, compliance and two process owners. Includes an offline demonstration prepared for your sector, without using your company’s data.

1

Inventory and obligations

Data in four levels and a first review of what your sector requires.

2

Three candidate use cases

And the Assessment proposal. The Discovery is credited against the Assessment.

3

Founding clients program

Three seats, with an explicit discount in exchange for a publishable case and a reference.

Terms

Discovery and evidence pilot at no cost, Assessment at a discount, in exchange for a publishable case, a reference and feedback. Continuous operation is always paid at list price.