Insurance is the industry where I see the biggest gap between what the technology should be and what it actually is. Carriers operating at enormous scale — millions of policies, billions in premiums — running on systems that were built when Bill Clinton was president.
And they know it. Every insurance CIO I've talked to has a modernization initiative on their roadmap. Most of them have had one for a decade. The ones that succeed and the ones that fail differ not in ambition but in approach.
Why Insurance Is Uniquely Hard
Regulatory constraints everywhere. Insurance is regulated at the state level, which means 50+ different sets of rules about how data is stored, how policies are priced, how claims are processed, and how long records are retained. You can't "move fast and break things" when "break things" means violating regulatory requirements in a dozen states simultaneously.
The institutional knowledge problem. The mainframe systems at most carriers are maintained by engineers who've been there for 20+ years. They don't just know the code — they know why the code has that weird exception for Louisiana flood policies or why the rating engine handles New York auto differently. This knowledge isn't documented. It lives in people's heads. And those people are approaching retirement.
Policy administration is the nuclear reactor. The core policy admin system — the one that prices policies, manages renewals, handles endorsements, and tracks coverage — is the single most critical system. If it goes down, the carrier can't write new business. If it produces wrong prices, the carrier takes on unpriced risk. Every modernization plan eventually has to address this system, and nobody wants to touch it.
Data is everywhere and nowhere. Thirty years of mergers, acquisitions, and system additions have left most carriers with customer data scattered across a dozen systems. The same policyholder might have different records in the policy system, the claims system, the billing system, and the agent portal — and those records don't always agree.
The Strangler Fig Pattern
The approach that works: don't replace the legacy system. Strangle it. Build modern services around it, one capability at a time, until the legacy system is doing less and less, and eventually can be retired.
Phase 1: API Layer. Put a modern API in front of the legacy systems. New applications talk to the API, not directly to the mainframe. This decouples the consumer experience from the backend reality and creates a migration path for each service independently.
Phase 2: Customer-facing modernization. Start with the systems that customers and agents touch: portals, quote engines, claims filing. These have the highest business impact and the clearest ROI (agent satisfaction, customer retention, quote-to-bind ratio). They're also the easiest to modernize because they're mostly presentation and workflow, not deep policy logic.
Phase 3: Claims processing. Claims is where carriers spend the most money and where AI/ML provides the most immediate value: automated triage, fraud detection, photo-based damage assessment, and straight-through processing for simple claims. Modernizing claims processing can fund the rest of the modernization through operational savings.
Phase 4: Core policy admin. Last because it's the highest risk. By this point, you've built modern APIs, proven the architecture patterns, and migrated the easier systems. The core migration can now happen incrementally — one line of business at a time, one state at a time — with the ability to fall back to the legacy system if something goes wrong.
The AI Opportunity
Insurance is one of the industries where AI has the clearest, most quantifiable ROI:
Underwriting automation. AI that can assess risk, pull from external data sources, and recommend pricing — reducing underwriting time from days to hours for standard risks.
Claims automation. Image recognition for property damage assessment, NLP for extracting claim details from customer narratives, and predictive models for fraud detection. Some carriers are achieving 30-40% straight-through processing for simple claims.
Customer service. AI-powered agents that can answer policy questions, process endorsements, and handle routine service requests — the high-volume, low-complexity interactions that currently cost $8-12 per human-handled call.
But — and this is critical — AI in insurance must be explainable. Regulators require that pricing and claims decisions be auditable and justified. A black-box model that denies a claim without explanation is a regulatory violation. Use AI for efficiency, but ensure every decision has a human-readable rationale.
Timeline and Budget Reality
I've never seen an insurance technology modernization complete in under 18 months. Most take 2-3 years for meaningful transformation. Budget accordingly: carriers that plan for a 6-month project end up with a permanent "temporary" architecture that's worse than what they started with.
The budget conversation is straightforward when framed correctly. Legacy system maintenance is already expensive — often 60-70% of IT budget. Modernization doesn't add cost; it redirects spend from maintaining yesterday's systems to building tomorrow's capabilities.
Related: When to Replatform, Technology Due Diligence for Acquisitions, What a Fractional CTO Actually Does