Book a pilot conversation

How it works

Nine workspaces. One guided journey from first question to renewal.

PrismX is a set of workspaces an SME moves through, from describing the business to a signed submission, and then on through the policy year.

Every workspace shows what the SME does and what the insurer gets. Advisors work in Prioritise, Improve and Verify.

Book a pilot conversationCheck your readiness
DiscoverAvailable now

Start with the business, not a questionnaire.

Discover builds the picture an underwriter needs: who you are, what you run, what data you hold, who you depend on and who must know first when something goes wrong.

What the SME does

  • Fill in the profile: activity, country, revenue, website and the sector questions an application asks.
  • List systems, data holdings and suppliers in board-style tables with inline edit.
  • Name the senior people and the control group whose awareness starts the clock in an incident.
  • Watch a completeness meter on each tab until Discover is complete.

What the insurer gets

  • The same organisation profile from every applicant, in the same order.
  • Exposure flags answered once: operational technology, card payments, technology services, US and Canada revenue share.
  • Suppliers and cloud providers on record before an outage, not after.

In the appProfile, Systems, Data, Suppliers and People

AssessAvailable now

One control library. Every insurer question answered from it.

Assess works through 76 controls in 13 domains, from multi-factor authentication and exposed remote access to immutable backups, incident readiness and governance. The Insurer view then shows how those controls answer the insurer’s own question set.

What the SME does

  • Set each control to in place, partly in place, not in place or not applicable, with an owner and notes.
  • See controls that do not apply to you marked not applicable from your profile.
  • Open the Insurer view to see each question answered yes, no or cannot answer yet, and the controls behind it.
  • Keep a risk register seeded from your gaps.

What the insurer gets

  • Answers derived the same way for every SME, with the controls that produced them.
  • The referral rule applied before submission: all yes, or a clear list of what is not.
  • A status is a claim until evidence is attached and verified.

In the appControls, Risks and Insurer view

PrioritiseAvailable now

Fix the gaps an underwriter will ask about first.

Prioritise ranks every gap in a fixed order: underwriting-critical controls first, then gaps that a lower limit in the wording depends on, then the rest by weight and exposure. Each gap says why it matters.

What the SME does

  • See gaps in tiers, not as one long list.
  • Read why each gap matters and where the requirement comes from.
  • Ask for an AI draft of the gap analysis, then accept, edit or discard it.

What the insurer gets

  • Applicants work on the controls your question set treats as critical.
  • The same ranking rule for every SME in the pilot.

In the appPriorities

ImproveAvailable now

Turn gaps into actions with an owner and a date.

Each action links to the controls it improves. Advisors can propose actions, and only the SME can accept them. Closing an action asks the owner for evidence.

What the SME does

  • Create actions with an owner, due date, priority and linked controls.
  • Accept or decline what an advisor proposes.
  • Attach evidence when an action closes, so the control can be verified.

What the insurer gets

  • Open actions travel with the submission, so you see what is in progress.
  • Improvements are tied to the controls they change.

In the appActions

VerifyAvailable now

Evidence behind the answers, verified by someone else.

The evidence vault holds policies, screenshots, configuration exports, attestations, training and test records and contracts. Files sit in EU storage. An advisor or insurer reviewer verifies them; the SME cannot verify its own.

What the SME does

  • Upload a file, give it a type and link it to the controls and actions it supports.
  • Ask for an AI summary that proposes which controls the file evidences, then review it.
  • See when a control was last verified and when it will need it again.

What the insurer gets

  • Each file is checked for type and signature and hashed with sha256 when it arrives.
  • Verification records who verified and when.
  • Downloads use short-lived links issued after a permission check.

In the appEvidence

Submit and signAvailable now

A submission pack the insurer can trust as sent.

Pick the question set, review the derived answers, explain any change, and let a person review the narrative. PrismX builds the pack, the SME admin signs it, and the insurer receives it in the review queue.

What the SME does

  • Answer what PrismX cannot derive and give a reason for any change to a derived answer.
  • Review the narrative. AI can draft it, but a person must accept it before the pack can be built.
  • Sign with typed name and position. Only the SME admin can sign and send.

What the insurer gets

  • One pack: cover, organisation answers, underwriting answers with evidence references, controls, risks, open actions, narrative and declaration.
  • A certificate page with signer, time, IP address, browser and the sha256 of the signed record and the pack.
  • If anything changes between request and signature, signing is refused.

In the appSubmission and Signature

CoverageAvailable now

What the policy does, in plain language.

Coverage explains each part of the wording in a sentence or two, marks what matters to this business, and shows the gaps: exposures the wording limits or excludes. Selections record what the SME would like, not a quote.

What the SME does

  • Read each clause with a Matters to you, Matters to every business or Not for you today marker.
  • See gaps for your business, with the controls behind them.
  • Record your preferred limit, deductible, waiting period, indemnity period and retroactive date.

What the insurer gets

  • Applicants who understand what they are asking for.
  • Preferences printed on the pack cover, frozen once the pack is ready to sign.

In the appWhat it covers, Gaps and Selections

Incident responseComing in the pilot

Before, during and after an incident, by the policy’s rules.

Incident response follows the conditions of the SME’s own wording. A readiness checklist before, a notification clock and rule cards during, and recovery, lessons and loss records after.

What the SME does

  • Check readiness: response line, control group, plan and the law enforcement route.
  • Record the incident and start the clock when a control group member becomes aware.
  • See the rules that apply, such as notifying the insurer and getting consent before any ransom payment.

What the insurer gets

  • Earlier notification and a record of who decided what.
  • Countdowns for the response windows your wording sets.

In the appReadiness, Incidents and Recovery

MonitorComing in the pilot

A risk profile that stays current between renewals.

Evidence has a shelf life. Monitor will re-check controls on a schedule, flag evidence that has expired and start the renewal assessment from the last one.

What the SME does

  • Get told when a backup restore test or training record needs renewing.
  • Start renewal from last year’s assessment and see what changed.

What the insurer gets

  • Controls that lapse are marked as needing re-verification, not left as in place.
  • A renewal that starts from evidence, not from a blank form.

In the appMonitor

Insurer and broker workspace

Your own workspace, with signed packs waiting.

Insurer admins and reviewers work from their own workspace. Brokers see the SMEs assigned to them, read only.

  • Review queueSent submissions for your tenant with SME, question set, date, referral result, status and the signed pack.
    Available now
  • SMEs, brokers and advisorsCreate SMEs and broker firms, issue invite codes and assign PrismX advisors.
    Available now
  • Submission reviewAnswers, evidence and open actions on one page, with comments and requests for information on a question or a control.
    Coming in the pilot
  • Decision recordQuoted, bound, declined or referred, with the date. It feeds the pilot metrics.
    Coming in the pilot
  • Pilot reportingApplicants reaching quote, quote to bind, submission to bind time and control evidence rates against your baselines.
    Coming in the pilot

AI that prepares, people who decide.

AI automates preparation, not accountability. Each job produces a draft that a person accepts, edits or discards.

  1. Summarise a document

    Reads the text of an uploaded file and proposes which controls it evidences. The file itself is never sent.

  2. Draft the gap analysis

    Turns the ranked gaps into proposed actions. Accepted actions go to Improve.

  3. Draft the narrative

    Writes the narrative sections of the submission from the answers and controls.

  4. Propose follow-up questions

    Suggests the questions an underwriter is likely to ask, given the answers.

PrismX prepares risk information. Insurers decide eligibility, pricing, coverage and claims. PrismX is not the underwriter or a broker.

See PrismX with your book in mind.

Tell us your market and your role. We will walk you through the journey from your seat.

Book a pilot conversationCheck your readiness