Playing in the Bermuda InsurTech Sandbox

Published: 24 Apr 2018
Type: Insight

First published by Appleby

Bermuda has been at the forefront of providing innovative solutions in the insurance industry and boasts the largest Insurance Linked Securities (ILS) and captive sectors in the world. Leveraging Bermuda’s reputation as a centre of excellence for innovation in a sound regulatory environment, the Bermuda Monetary Authority (BMA) is now launching two parallel innovation tracks: an insurance regulatory sandbox (Sandbox) and an Innovation Hub, both initially targeted at insurance technology (InsurTech) companies. The BMA released the Consultation Paper on Insurance Regulatory Sandbox in April 2018.


InsurTech Sandbox

What is a sandbox?

The Sandbox is a space where companies can test new technologies and offer innovative products, services and delivery mechanisms to a limited number of customers in a controlled environment and for a limited period of time.

How can you get involved?

The Sandbox is for companies looking to be licenced as insurance entities under section 4 (Regular Insurer) or section 10 (Insurance Intermediaries) of the Insurance Act 1978. The BMA encourages using a separately incorporated company. The BMA will start accepting applications to the Sandbox from 1 July 2018.

How does the process work?

1. Application:

The application includes a cover letter, constitutional documents, net worth statements and a business plan verifying that the company satisfies the BMA’s eligibility criteria. The eligibility criteria used in evaluating the company includes, among other things, that (i) the proposed product, service or business model should be new or use existing technology in a different way, (ii) the company should have conducted research and due diligence, (iii) the company should clearly define objectives for testing, (iv) the company should demonstrate its understanding and assessment of associated risks and their mitigation and (v) the company should have the intention, ability and resources to deploy the proposed product, service or distribution channel upon successful testing.

2. Review:

Having reviewed a company’s proposal, the BMA would determine the legislative and regulatory requirements that would be modified for the duration of the Sandbox testing. The BMA will consider each application on a case-by-case basis and will typically respond within two weeks of the initial contact and then commence the application process.

The following two tables outline which requirements may or may not be potentially modified in the Sandbox:

3. Proof of concept i.e. the Sandbox:

Upon final approval, the company will be assigned a Principal Contact (BMA staff member) to assist throughout the duration of the Sandbox. A company will be assigned a temporary sandbox licence. In the Sandbox there is one licence available for long term insurers and one licence available for general business insurers; there are no special classifications. Sandbox licences are designated by the letter ‘I’ and are ILT, IGB, IM, IA and IB for long term insurers, general business insurers, insurance managers, agents and brokers, respectively.

4. Deployment:

Upon completion of the proof-of-concept phase, the company must submit a final report to the BMA on the outcomes of the testing including client feedback on the products, services and delivery mechanisms. After an in depth consideration of the company’s business model and any other legal and regulatory requirements, the company will be relicensed in accordance with the existing insurance company classes.

Innovation Hub

The Innovation Hub is a platform for exchanging ideas and information; it facilitates dialogue between the BMA and market participants. This space is intended for activities that are not directly regulated by the BMA or where a company is still developing its thoughts and ideas and not yet prepared for the Sandbox.

Maintaining a Sound and Relevant Regulatory Environment

A list of the companies approved to operate under the Sandbox will be posted on the BMA website for transparency to the public.

As with all companies operating within Bermuda, companies testing in the Sandbox must conduct business in a prudent manner and will be subject to Bermuda’s robust regulatory environment. This includes compliance with the Anti-Money Laundering and Anti-Terrorist Financing as provided in the Proceeds of Crime Act 1997, the Anti-Terrorism (Financial and Other Measures) Act 2004, the Proceeds of Crime (Anti-Money Laundering and Anti-Terrorist Financing) Regulations 2008 and any other international sanctions in force in Bermuda. The Sandbox will not be allowed to be used as a means of circumventing legal and regulatory requirements or to benefit from regulatory arbitrage.

Continued Innovation

The BMA will use the experience arising from the Sandbox and Innovation Hub to update the framework when required to avoid unnecessary discouragement of innovation while maintaining adequate policyholder protection.

Should you have any queries, or wish to obtain any advice, please do not hesitate to contact us.

Share
More publications
050-Insolvency-Restructuring-Grid-Image
13 Jul 2026

Bermuda: Restructuring & Insolvency

This country-specific Q&A provides an overview of Restructuring & Insolvency laws and regulations applicable in Bermuda.

Appleby-Website-Regulatory-Practice
10 Jul 2026

It’s healthy to sometimes disagree with regulators

At some point, almost every regulated business will disagree with its regulator.

Appleby-Website-Privacy-and-Data-Protection
8 Jul 2026

Bermuda Privacy Commissioner Signals Shift to Stronger PIPA Enforcement

The Office of the Privacy Commissioner (PrivCom) has issued its first annual report since Bermuda's Personal Information Protection Act 2016 (PIPA) came fully into force, with the reports content signaling a transition from education and implementation to a stronger focus on enforcement.

Bermuda-1024x576-1
1 Jul 2026

A Forest for the Future

A first since the blight, the airport cedar forest is growing tall and standing strong.

Appleby-Website-Regulatory-Practice
1 Jul 2026

Complied out of business

Firms are complying themselves out of business because compliance no longer matches the evolving sophistication of the Bermuda Monetary Authority (BMA).

Appleby-Website-Insurance-and-Reinsurance
1 Jul 2026

The long game: how Bermuda became the world’s life reinsurance capital

Ask a life insurer in New York, London or Tokyo where the liabilities behind their book ultimately sit and there is an increasingly good chance the answer is a 21-square-mile island in the North Atlantic.

Appleby-Website-Insurance-and-Reinsurance
1 Jul 2026

Record H1’26 Cat Bond Issuance Driven by Rising Sponsor Comfort and Diversified Risk

With H1 2026 officially breaking the record for the most catastrophe bond deals to come to market and settle in the first six months of the year, a key trend driving this momentum is how comfortable sponsors have become with the mechanics of the overall cat bond space. This familiarity has ultimately encouraged a wave of new sponsors to enter the market, according to Brad Adderley, Managing Partner at law firm Appleby.

Appleby-Website-Employment-and-Immigration
12 Jun 2026

The Cost of Getting Employee Departures Wrong: Five Common Pitfalls for Bermuda Employers

Employee departures are an inevitable part of running a business, but the way they are managed can have significant legal, financial and operational consequences. In Bermuda, employers who approach terminations without adequate preparation may expose themselves to unnecessary disputes, regulatory issues, and reputational harm. Whether an employee is being dismissed for performance reasons, made redundant or departing as part of a negotiated exit, by recognizing the following common mistakes and taking a proactive approach, organizations can manage departures more effectively and reduce risk.

Appleby-Website-Privacy-and-Data-Protection
8 Jun 2026

It’s time to bridge Pipa compliance gap

A review of 200 publicly available privacy notices of companies in Bermuda has revealed that just one in nine are fully compliant with the Personal Information Protection Act 2016.

Appleby-Website-Privacy-and-Data-Protection
26 May 2026

Transparency is a legal requirement under Pipa

Major companies across the European Union have faced substantial fines between 2019 and 2024, estimated at a total of €930 million (about $1.08 billion), not only for cyberattacks or data breaches, but also for issues such as noncompliant privacy notices. A common theme in many cases has been a lack of transparency.