London specialty insurance market: Roughly a year of stalled work, rebuilt as a working proof of concept in two weeks
If you are a UK insurer, what transfers and what does not
- Provenance-scored extraction transfers.Every enrichment carries the source it came from, so the lineage question a data or actuarial owner will ask has an answer that was recorded at the time rather than reconstructed afterwards.Read the full paragraph
- Confidence-routed human review transfers.Routing review by confidence and consequence is describable to a second line as a control, which a review queue worked in arrival order is not.Read the full paragraph
- The two-week build pace is n=1.One greenfield build, one client, one paired engineer. It is the fastest thing on this site and the least repeatable, and you should not plan against it.Read the full paragraph
- Nothing here has been through a coverholder audit.It is a proof of concept inside one firm, and no assurance function has yet looked at it. What that leaves unevidenced is set out in full below.Read the full paragraph
- No regulatory opinion was given.Compliance was outside our scope and we advised on none of the regimes named on this page. Each is set out below beside what we did and did not do against it.Read the full paragraph
On this page
The challenge
A specialty insurance business was running a complex multi-workstream programme with delivery stalling in the gaps between product, engineering and platform. Data quality issues were blocking development and testing, a security gate was approaching with no coordination owner, delivery tooling was split across Azure DevOps boards and GitHub, and the leadership team wanted an AI strategy that amounted to more than a set of tool licences. The immediate need was momentum; the underlying need was a different way of building.
What we did
Month one was an audit, and it took us across far more of the programme than a readout exercise would have. We took ownership of whatever was actually blocking delivery: unblocking the data issues holding up development and testing, supporting disaster-recovery failover planning and release governance, and leading the migration from Azure DevOps boards to a GitHub-based delivery model with agent-assisted workflows. In parallel, on the operating-model workstream, we contributed to the workshops shaping product vision, data strategy and the AI operating model, and produced the structured outputs defining MVP focus, data foundations and AI strategy. The value of doing it that way is that by the end of the month we understood the estate from the inside rather than from a survey.
Month two went after the capability the business had been circling for roughly a year: getting information out of PDFs and turning it into business intelligence. We ran our AI-engineering-first method. Every requirement (PDFs, diagrams, images) became structured markdown, AI built a knowledge map across the corpus, and a gap-and-contradiction pass surfaced ambiguities the business had not realised were ambiguous, before a line of code was written. Those went back to the subject-matter experts and were resolved in conversation rather than in rework.
Only then did the build start, from a blank repository on Azure, with high-level prompts against the whole requirement set and a security review roughly every fifth prompt. This was greenfield. It replaced work that had stalled rather than changing a running system with existing behaviour to preserve, and the two-week figure should be read in that context. The pipeline itself is set out stage by stage below.
The entire fortnight was pair-programmed with one of the client’s own engineers, because a proof of concept nobody internal can reproduce is a demonstration rather than a capability.
// run against The Tenhaw Way, published in full and free to adopt without engaging us
The pipeline
7 stages · the part a technical buyer forwards to a principal engineer
- 01
Extract to markdown
Every source document is converted to markdown before anything else happens, so what the model actually read stays inspectable by a human rather than disappearing into an embedding. - 02
Narrow to the key fields
The markdown is reduced to the fields the business needs, rather than carrying whole documents forward and paying for them at every later step. - 03
Normalise
Fields are normalised into consistent shapes and units, so downstream logic compares like with like instead of guessing. - 04
Enrich against third-party APIs
Records are enriched from external sources, and each enrichment carries the provenance of the source it came from. - 05
Add semantic context and thematic grouping
Related records are grouped and given the context a person would otherwise add by hand when reading them side by side. - 06
Apply business logic
The client's own rules run over the enriched record. This is the layer that is theirs, not ours, and it is the layer that changes most often. - 07
Land in the dashboard
Output lands in an internal dashboard the business already uses, rather than in a tool that only exists while we are there.
Confidence routing
- Source provenance
- How much the source of a given enrichment is worth trusting.
- Model certainty
- What the model itself reports about the extraction or the match.
- Search cross-check
- An independent search-based check against the value that was produced.
Those three produce a confidence score on the record, and the score is an input to routing rather than a display value. Review is routed by confidence and consequence together, so a low-confidence field on a high-consequence record reaches a human first and a high-confidence field on a low-consequence one does not generate work. That is a routing rule, not an assurance framework, and it has not been through a regulator or an audit.
The outcome
In two weeks the proof of concept was working: PDFs in, structured and enriched data out, business intelligence on a dashboard the business could use, covering ground that had previously taken roughly twelve months. A separate AI data-quality proof of concept on Azure OpenAI demonstrated that entity-resolution output could be validated and scored automatically, with human review prioritised rather than queued.
The number we care about most is the softest one. At the end of the fortnight we asked the client engineer who had paired on the whole build how confident they were that they could follow the process and deliver the next outcome without us. They said 70%, and 70% after two weeks is the difference between having bought a proof of concept and having started to acquire a capability.
The two-week build is a proof of concept, not a production deployment. Month three stands up an adjacent agent-led engineering team to productionise it against the organisation’s security standards, on a four-to-six week target.
70% after two weeks is the difference between having bought a proof of concept and having started to acquire a capability.
Limits, and what is withheld
What transfers is the whole shape of the engagement: one senior person accountable from month one, the operating-model outputs produced alongside the build, a monthly cadence with measurable value at the end of each month, and a handover built into the build rather than bolted onto the end of it. What does not transfer yet is production. This is a working proof of concept built inside the client's regulated estate, month three is productionising it against the client's security standards, and the result will be published here, dated, when it lands.
The architecture in detail, the model and platform choices, the prompt and review approach, and the working history of the fortnight sit under client confidentiality, alongside the client's name. You should expect the same treatment of your name and your estate if you engage us.
What did not change
Three things this engagement left exactly where it found them. If you are citing the numbers above, cite these with them.
- 01
Nothing moved into production.
The two-week build is a working proof of concept, built inside a regulated insurer's estate rather than on synthetic data. Month three is productionising it against the organisation's security standards.
- 02
No regulatory or audit position changed.
We were not engaged on compliance and we did not advise on Solvency II, Consumer Duty, operational resilience or DORA. No delegated authority audit, no internal model validation and no Lloyd's review has looked at any of this. The confidence routing is a routing rule, not an assurance framework, and it has not been through a regulator or an audit.
- 03
One engineer's confidence is the only measure of handover we have.
The 70% is what the client engineer who pair-programmed the fortnight said when we asked them, after two weeks. It is self-reported, it is one person, and no one else's ability to run the process has been measured, so the wider team's is untested rather than proven.
If the parts that did not change are the ones you are worried about, bring them to the call.
Talk it throughWhat a security review of this build would find today
No client security review has looked at this build yet. This is what our published supplier position and this page's account would put in front of one, including the parts that would come back as gaps.
In place
- A security review ran roughly every fifth prompt of the build rather than once at the end
- Extraction lands in inspectable markdown before it is narrowed and normalised, so a reviewer can see what the model actually read rather than being handed an embedding
- Every enrichment carries the provenance of the source it came from, and the confidence score built from provenance, model certainty and a search cross-check routes review by consequence as well as by confidence
- Under our published policy, no client data, code or documentation goes into any AI tool the client has not named and approved in writing, and where an approved enterprise AI tenancy exists we work inside it rather than bringing our own
- Under the same policy, model providers are used on zero-retention or enterprise agreements, so client content is not retained by them or used for training
- Our default is to work on client infrastructure under client controls: their identity provider, their access controls, and least-privilege access time-boxed to the engagement with a documented offboarding step
- BS7858-standard screening before any client access, and written confidentiality and data-handling terms, are contractual commitments in the engagement agreement
- No client production data is retained after an engagement ends, with retention and deletion terms set in the Data Processing Agreement
- Professional indemnity at £1m and cyber at £25k, either of which can be increased for a specific engagement where a supplier standard requires it
Not yet in place
- No independent security testing has been run against this build
- No independent assurance of the routing rule. It is a control in the making, not a validated one, and no second line has signed it off
- Cyber Essentials Plus is in progress rather than held, ISO 27001 is targeted for 2027, and ISO/IEC 42001 is under assessment
- Productionising the build against the organisation's own security standards is month three's work, and it has not happened yet
The full supplier position, including the cover levels, the DPA and the sub-processor annex, is on the security page.
If your security function has a question this page does not answer, put it on the call.
Talk it throughThe obligations this work sits underneath
What each regime asks of an AI programme in this sector, and what we did and did not do against it.
The regime an AI programme inside a UK insurer inherits
A specialty insurer writing in the London market is supervised by the FCA, and where it is a designated firm, by the PRA as well. An AI programme inside one inherits obligations that have nothing to do with model accuracy.
Solvency II expects a documented system of governance with clear ownership of any process feeding risk or capital decisions, which means an extraction pipeline touching submissions or exposure data needs a named owner and a written control rather than a notebook. The FCA's Consumer Duty requires firms to evidence the outcomes customers actually get, so where an automated step influences one, it has to be explainable months later by someone who was not in the room. Operational resilience rules ask which important business services the new system sits inside and what happens when it is unavailable, a question almost nobody asks of a proof of concept until it has quietly become load-bearing. For firms with EU entities, DORA extends the same thinking to third parties, which now means model providers and the APIs an enrichment step calls.
None of that is satisfied by an evaluation harness.
What our method produces towards that, and what it does not
We were not engaged on regulatory compliance. We did not advise on Solvency II, Consumer Duty, operational resilience or DORA, and nothing here is a regulatory opinion.
The way we build produces some of the evidence those regimes ask for as a by-product rather than as a later exercise. Extraction lands in inspectable markdown before it is narrowed and normalised, so a human can see what the model actually read. Every enrichment carries a confidence score derived from the provenance of its source alongside model certainty and a search-based cross-check. Human review is routed by confidence and consequence, which is the beginning of a defensible control. Security review runs roughly every fifth prompt of the build.
If you need a regulatory opinion, you need a regulatory specialist, and we will say so on the first call. If you need the programme built so that a regulatory specialist can evidence it afterwards, that is the work described on this page.
Your context will differ from this one. Thirty minutes is enough to say by how much.
Talk it throughWhat this engagement does not claim
The same caveats the case studies hub carries, narrowed to this engagement so nothing here is a surprise to your analyst.
- 01
The client is confidential, and stays that way.
This organisation has not consented to being named, so nothing on this page identifies it: no product names, no people, no detail that would narrow it to one firm in the market. Before you sign, we will ask them for a reference call, and if they decline we will tell you so. You should expect the same treatment of your name if you engage us.
- 02
Nothing agentic is in production yet.
The specialty insurance build is a working proof of concept, and month three stands up an agent-led engineering team to productionise it against the client's security standards. The HSBC Voice Insights platform was a proof of concept, and its 1.5M hours a year is a projection rather than a measured saving.
- 03
The 70% is one engineer's own estimate.
It is what the client engineer who pair-programmed the build said when we asked how confident they were of running the process without us: self-reported, after two weeks, not a benchmark. We report it because handover is the measure we care about most.
If you want to know whether we have done your version of this, ask on the call and we will answer plainly.
Talk it throughOther engagements
Sector first, because that is the next question. All twelve are on the hub, grouped into the two we would call AI work and the ten we would not.
Running agile at the top: a Scrum Master for the CIO's executive team
150+, global teams in scope
An AI Voice Insights platform projected to save 1.5M hours a year
1.5M+, hours/year of admin removed (projected)
Designing the target operating model for 500 teams and a $450M portfolio
500, teams in scope
Or skip the reading and ask which of these is closest to your problem.
Talk it throughWhat this engagement is called before anyone finds us
The words buyers arrive with, and what they have in common.
What buyers call this before they find us
Three different searches land on this engagement and all three describe the same thing. Some call it a fractional head of AI, because what they need is one senior person accountable for the AI programme without a permanent executive hire. Some call it an interim AI programme director, because a programme already exists and nobody owns the agentic part of it. Some go looking for an agentic AI consultancy or an AI implementation partner, because the advisory work has been done twice already and produced slides.
The distinguishing test is worth applying to anyone you shortlist, us included: ask what they will personally have shipped by the end of month two. Here the answer was a pipeline that takes PDFs in and puts business intelligence out on Azure, built from a blank repository, in two weeks.
Whatever your organisation calls this work, the call is the same thirty minutes.
Talk it throughSee how we did it
A real engagement walked through by the person who led it, then the same method applied to yours.
- The ways of working, published in full and free to adopt without hiring us.
- The target operating model James co-led at HSBC: designed and piloted for 500 teams, with global rollout due in 2026 and not yet rolled out.
- The AI build inside a live London specialty insurer: a working proof of concept, month by month, with the client anonymised to a market.
Everything the call covers about our work is already published on this site. What it adds is the person who did that work, and your own situation put through the same method.
The 30-minute discovery call starts with your problem. This one starts with our work.
Pick a time on cal.comWant the same thing, in your organisation?
A 30-minute call with James Rooney. We will tell you which parts of this we have done before and which we would be doing for the first time, and you will leave with a rough scope either way.
most start with a fixed-price AI Readiness Audit · £44,000 · 4 weeks · working prototypes
Calendar not loading? Open it on cal.com or email hello@tenhaw.com.
Questions about this engagement
Why is the client in this case study not named?
Because the client has not consented to being named, and Tenhaw treats consent as binding. The engagement is with a business in the London specialty insurance market, and that is as specific as the page gets. The architecture in detail, the model and platform choices, the prompt and review approach and the working history of the fortnight all sit under client confidentiality alongside the name. That restraint is the point. If you engage Tenhaw, you should expect the same treatment of your name and your estate.
Is the twelve months to two weeks comparison fair?
Yes, provided you read it the way the case study frames it. The two-week proof of concept was greenfield. It began from a blank repository on Azure and replaced work that had stalled, so there was no running system with existing behaviour to preserve. The roughly twelve months is this client's own prior effort circling the same capability, getting information out of PDFs and turning it into business intelligence, without a working result. Same business goal, reached in a fortnight, under conditions that favoured speed. And the claim is a working proof of concept, not a production system.
What does the 70% figure in this case study mean?
It is the client engineer's own confidence, in their own words, that they could run the process without Tenhaw. The entire two-week build was pair-programmed with one of the client's engineers, because a proof of concept nobody internal can reproduce is a demonstration rather than a capability. At the end of the fortnight Tenhaw asked that engineer how confident they were that they could follow the process and deliver the next outcome unaided, and the answer was 70%. It is deliberately the softest number on the page and the one Tenhaw cares about most, because it marks the difference between buying a proof of concept and starting to acquire a capability.
Is the insurance proof of concept in production yet?
No, and the case study says so plainly. The two-week build is a working proof of concept inside the client's regulated estate: PDFs in, structured and enriched data out, business intelligence on a dashboard the business already uses. Month three of the engagement stands up an adjacent agent-led engineering team to productionise it against the organisation's security standards, on a four-to-six week target. When production lands, the result will be published on the page, dated. A proof of concept is labelled as one here until production is real.
What did month one of the insurance engagement involve?
Month one was an audit, and it went a long way past a readout. Tenhaw took on whatever was actually blocking delivery. That meant unblocking the data quality issues holding up development and testing, supporting disaster-recovery failover planning and release governance, and leading the migration from Azure DevOps boards to a GitHub-based delivery model with agent-assisted workflows. In parallel it contributed to the workshops shaping product vision, data strategy and the AI operating model, and produced the structured outputs defining MVP focus, data foundations and AI strategy. By the end of the month Tenhaw understood the estate from the inside, and that is what set up the month-two build.
What would this insurance engagement cost at published rates?
At Tenhaw's published pricing this maps to an Agentic Build Team at £70k–£85k per month, three people under partner oversight. A business that wanted the programme oversight without the build would be looking at Programme and Delivery Management at £18k–£35k per month. Both come off a published rate card. Partner £1,560 a day, senior practitioner £1,250, associate £950, excluding VAT, at twenty billable days a month. Stating the equivalence on a confidential case study is deliberate, because the pricing is not confidential. You can price the same shape of engagement for your own estate before a single call.
What happened before any code was written on the insurance build?
The requirements were engineered first. Every requirement, including PDFs, diagrams and images, was converted to structured markdown, AI built a knowledge map across the whole corpus, and a gap-and-contradiction pass surfaced ambiguities the business had not realised were ambiguous. Those went back to the subject-matter experts and got resolved in conversation, before they could turn into rework later. Only then did the build start, from a blank repository on Azure, with high-level prompts against the whole requirement set and a security review roughly every fifth prompt. That sequence is what Tenhaw calls its AI-engineering-first method, run here inside a regulated estate.
How does the pipeline decide which records a human reviews?
Three things go into a confidence score on each record. Where the enrichment came from, how certain the model itself reports it is, and what an independent search-based check makes of the value produced. The score drives routing and is never simply displayed. Review is routed by confidence and consequence together, so a low-confidence field on a high-consequence record reaches a human first, and a high-confidence field on a low-consequence record does not generate work. The case study is explicit that this is a routing rule, not an assurance framework, and it has not been through a regulator or an audit.
Who owns the business rules in the document pipeline?
The client does, by design. Extraction to markdown, narrowing to key fields, normalisation, enrichment against third-party APIs and semantic grouping are all plumbing. The business logic layer sits on top of them and runs the client's own rules over each enriched record. The case study calls that layer theirs, not ours, and it is the layer that changes most often, so it should not belong to a supplier. Output then lands in an internal dashboard the business already uses. Built to leave applies to the architecture, not just the contract.
Can AI validate entity resolution output automatically?
On this engagement, yes, at proof-of-concept level. Alongside the main document pipeline, a separate AI data-quality proof of concept on Azure OpenAI showed that entity-resolution output could be validated and scored automatically, with human review prioritised rather than queued. The practical difference is who waits. The scoring decides which matches need human eyes first, so people are not working down a queue of every matched record. This was demonstrated on a live engagement in the London specialty insurance market, and like the main build it is a proof of concept, not a production deployment.
How does a specialty insurance AI implementation run month by month?
Monthly, and each month has to end in something measurable. Month one of this specialty insurance AI implementation was an audit that behaved like ownership, taking on whatever was actually blocking delivery and producing the operating-model outputs on MVP focus, data foundations and AI strategy. Month two was the build. A working proof of concept in a fortnight, PDFs in and business intelligence out on a dashboard the business already uses. Month three stands up an adjacent agent-led engineering team to productionise it against the organisation's security standards, on a four-to-six week target. One senior person has been accountable since month one.
What does a London specialty insurance AI strategy need beyond tool licences?
Something the business can build against. This client's leadership wanted a London specialty insurance AI strategy that amounted to more than a set of tool licences, so month one produced the structured outputs defining MVP focus, data foundations and AI strategy, alongside the workshops shaping product vision and data strategy. Month two then tested it by building. A working proof of concept in two weeks, PDFs in, structured and enriched data out, business intelligence on a dashboard the business already uses. The order is the point. The people who wrote the strategy had to deliver against it a month later. That is a harder test than a slide review.
How was security handled on a two-week AI build in a regulated estate?
Roughly every fifth prompt, a security review ran across the whole system, inside the build rather than after it. The fortnight started from a blank repository on Azure inside the client's regulated estate, with high-level prompts against the whole requirement set. Reviewing at that rhythm keeps each review small enough to act on while the code is still cheap to change. Security was already a live programme concern when we arrived, with a gate approaching and no coordination owner, and month one picked that up. The cadence is a build practice. Sign-off comes with productionisation against the organisation's security standards.
Why move delivery from Azure DevOps boards to GitHub?
The delivery tooling was split across both, so no single place showed the state of the work. Month one led the migration to a GitHub-based delivery model with agent-assisted workflows. That puts the delivery record next to the code the agents are working in, so nobody has to keep a separate system in step by hand. The same month also covered the data issues holding up development and testing, plus disaster-recovery failover planning and release governance. Read it as the right call for this estate. It is not a general instruction to leave Azure DevOps behind.
Why not just send whole PDFs to the model?
Because carrying whole documents through every stage is expensive and hard to check. Each source document is converted to markdown first, so what the model actually read stays inspectable by a human instead of disappearing into an embedding. The markdown is then narrowed to the fields the business needs, so whole documents are not carried forward and paid for at every later step. Normalisation, enrichment against third-party APIs with the provenance of each source attached, and semantic grouping all run on that narrow record, and the client's own business rules run last. Keeping the markdown means a person can still see where an answer came from.