For banks, insurers and intermediaries
Stay in control of AI in advice and claims work.
See which AI tools advisers and claims handlers use and record what is allowed for each one. Staff get help as soon as client data appears in their text.
Prefer to try it yourself? 14 days free, no credit card.
AI is already part of advice and claims work. Oversight is not.
Advisers use AI to explain a mortgage recommendation more clearly, claims handlers use it to summarise injury files and an underwriter is trying a new document recognition tool. Those texts hold citizen service numbers (BSN), incomes, account numbers and medical details. Internal audit and the regulator want to know how you handle that. Here's how to stay in control, in four steps.
1 See
See which AI tools advisers and handlers use.
Operations wants to know which AI tools the advice teams and the claims department use, besides the Copilot licence IT pays for. The catalogue shows the tools seen in the organisation, from Copilot and ChatGPT to insurance tools such as Akur8, Cytora and the newly spotted EvolutionIQ, each with a risk score and the organisation's decision. Usage and Compliance show what share of AI use goes through approved tools.
More about SeeAn impression of the AI tools catalogue. The tools and risk scores come from the product. The decision in the last column is your organisation's own.
2 Decide
Assess a new tool before client files go into it.
A claims handler wants help summarising injury files and tries EvolutionIQ, a platform that reads injury claims. Compliance has not assessed it yet. The screen shows the assessment of EvolutionIQ: vendor CCC, data held in the United States, unknown whether it trains on input, and a data processing agreement (DPA) on offer. It also notes that the AI Act can set stricter requirements when people are assessed. The organisation decides, for example, to allow it only after a DPIA, and records that decision and the use case in the AI register.
More about DecideProduct example with fictional data.
3 Help
Help staff protect client data while they work.
An adviser asks an AI tool to make the note on a mortgage recommendation clearer for the client. The name, BSN, income and account number are all in it. BeeSensible highlights those details in the text, and medical details in a claim file too. One click turns them into a placeholder such as [NAME1], or removes them. The organisation can also set masking to happen automatically when text is pasted or sent. A full advice report can be anonymised the same way before the file is shared.
Internal names such as an underwriting system, a claims portal or a product that is not on the market yet can be added as custom terms.
Custom terms that fit here
- Project Waterline Project
- Delta underwriting engine System
- Claims portal CP4 System
- Northern Light savings plan Product or service
GeminiAdvice report: mortgage
Applicant Nadia Willemsen, born 29 September 1988, BSN 206481937, living at Rozenstraat 8 in Deventer.
Gross annual income €58,400. Repayments are made from NL91 ABNA 0417 1643 00. Contact via n.willemsen@example.com.
DeepSeek is not allowed here
Your organisation does not allow this tool for work. Use an allowed alternative.
Use instead
Open Microsoft 365 CopilotAlso allowed: ChatGPT
DeepSeek is allowed here, with limits
Your organisation allows this tool with limits. Only use it with anonymised data.
Use instead
Open Microsoft 365 CopilotAlso allowed: ChatGPT
No decision yet on DeepSeek
Your organisation has not made a decision on this tool yet. Do not share personal data or confidential business information here.
Use instead
Open Microsoft 365 CopilotAlso allowed: ChatGPT
Only enter public information here
Product example with fictional data.
4 Substantiate
Show internal audit and the regulator how your AI policy works.
Internal audit asks how the organisation handles client data in AI tools, and the regulator wants to see evidence. Each month or quarter you create a report: how many tools have a decision, how many critical details were adjusted before sending, and how often staff chose the approved alternative after a notice. Always for the whole organisation, never per adviser or handler, and downloadable as a PDF for the second line or the audit file.
More about SubstantiateNotices about tools
Shown when someone opens a tool without a decision, or one that is limited or not allowed.
Browser use only, counted at most once per tool per day.
Product example with fictional data.
A customer's view
"Everyone here knows you have to be careful with customer data. But that awareness fades when you're busy. Knowledge is no guarantee of behaviour. That's exactly why we use BeeSensible."
Debby Elfrink Operations director, Speck Pompen This customer works in a different sector.
Trust and getting started
Your data stays safe, and getting started is quick.
What happens to your data
- Text is checked on our own servers, hosted by the European companies Scaleway and Hetzner, and deleted straight away.
- The dashboard shows totals for the whole organisation, never a breakdown by employee. Figures only appear once five or more users are active.
- You get a data processing agreement (DPA). The product DPIA and security information are available on request.
How to get started
- Install the extension on a few workstations, or have IT roll it out centrally through Intune or Group Policy, on any plan.
- Employees get an explanation and short videos about what they'll see and what they can do.
Good to know
Questions we often get.
Does BeeSensible also assess our own models, such as an underwriting model?
No. The catalogue covers third-party AI services staff use in the browser or on the desktop. An underwriting or credit model you build yourself falls under your own model risk management. You can record in the register which regulated use cases you run with a tool.
Does the detection recognise Dutch financial data?
Yes. The detection works in English and Dutch and recognises BSNs, IBANs, card numbers, Chamber of Commerce (KvK) numbers, amounts and salaries, among others, as well as names, addresses and health data. In each detection profile, you choose which types are highlighted, and how strictly.
How does this fit the AI Act, the GDPR and DORA?
The AI Act lists credit scoring, among other uses; for each tool you record what it is used for. Under the GDPR, medical details are a special category of data. DORA asks you to manage ICT third-party risk, and that starts with knowing which AI services are in use. It is for risk and compliance to judge what is appropriate.
What if an adviser uses AI on a personal phone or home computer?
BeeSensible does not see that. It works on the devices and in the browsers where it has been rolled out. That is why the report also shows the measurement coverage: on how many workstations BeeSensible is active.
Does BeeSensible block AI tools?
Not on its own. People see what was found and what you decided about a tool. You decide whether someone can still go ahead with a tool that is not allowed, and whether masking happens by default. What happens after a highlight or a notice is counted, without content and without a name.
Read more about AI governance for mortgage and insurance organisations
Start by seeing which AI tools advisers and handlers use
Start with an advice team and a claims team, or see it in a demo first.
14 days free, no credit card. Rolled out across your organisation within an hour.
