VaulithNine questions, free

You sell software to insurance carriers.

Know what stops the review, before you send it.

Vaulith is a readiness assessment for the security and AI questionnaire a carrier sends you. It tells you which answers their reviewer will stop on, before you send them, and gives the reviewer a profile they can close.

Built by the Vaulith team, professionals with more than a decade of experience on the carrier side of vendor security and AI reviews.

The full assessment is $499, takes about thirty minutes, and needs no demo and nothing integrated.

Try the engine on one fact

Your product calls a third-party model. Could you hand a carrier an approved document that names the provider?

Choose an answer. The derivation appears here, step by step, from the fact you give. Nothing is shown before that, because the engine has nothing to derive from.

That is one fact of nine. The free snapshot asks the other eight, in about ninety seconds, with nothing leaving your browser.

Scored against the public instruments, cited to the paragraph
  • NAICAI Model Bulletin, adopted 2023
  • NAICAI Risk Evaluation Supplement, draft v5.0
  • NYDFS23 NYCRR Part 500, third-party provisions
25questions a carrier's AI review turns on, each drawn from a public instrument and cited to its paragraph
9questions free, ninety seconds, nothing leaves your browser
$499one payment, twelve months of the full assessment, about thirty minutes
How it works

Describe it once. Read what a reviewer will do. Send them something they can close.

01

Describe your estate, in about thirty minutes.

Your estate is the AI systems in your product, the documents that stand behind them, your security posture, and your answers to the twenty-five questions. A guided intake asks for each one in plain words, with an example under every question, and the score and the findings change as each fact lands.

What the intake asks →
02

Read what a reviewer will do with it.

Every finding is ranked by the reviewer's reaction, not by how hard it is to fix. 1 of the worked example's 9 findings will stop a review outright, and the rest cost you round trips. Each one says why a reviewer reacts that way and what closes it, and the whole assessment is yours as a print-ready document.

The worked example's gap report →
03

Share a profile a reviewer can close, and see what they open.

A scoped, expiring link, and no account for the reviewer to get provisioned. They read your systems, your security posture and your cited answers, acknowledge confidentiality before the evidence opens, and are told what changed since their last visit. You see every open and every download while the deal is still moveable. They never see your score or your findings.

What the reviewer sees →
Why this is happening now

Carriers became accountable for how their vendors govern AI.

The obligation does not transfer. An insurer using your model still has to document its own diligence, which means questions you have never been asked are arriving in questionnaires you have already answered four times.

December 2023
NAIC Model Bulletin on the use of AI by insurersAdopted by roughly two dozen states and the District of Columbia since. NAIC adoption map
March to September 2026
NAIC AI Systems Evaluation Tool, twelve-state pilotA structured examiner questionnaire on AI governance, high-risk models, data inputs and third-party use, field-tested by twelve states. NAIC pilot project summary
August 2026
Renamed the AI Risk Evaluation Supplement; version 5.0 exposed for commentThe exhibits are an optional supplement to the examination handbooks. Vaulith scores against version 5.0 and keeps the text. NAIC Big Data and AI Working Group
14 to 17 November 2026
A later version goes to the Fall National Meeting for considerationIn the NAIC's own words, the plan is to consider the updated instrument for adoption at the meeting. Not a mandate either way; the bulletin and Part 500 are the anchors that already apply. NAIC working timeline
What it costs

One price on the page, paid by card, and nothing that renews on its own.

$499twelve months

The readiness assessment, automated

  • Every finding, ranked by reviewer reaction, with its reasoning and its fix.
  • A readiness score with the arithmetic shown, and a print-ready document.
  • A carrier profile your reviewer opens by link, with no account.
from $15,000per engagement

The readiness review, in writing

  • The register produced and the determinations drafted, not just identified as missing.
  • Your carrier questionnaire answered end to end, with the source behind each answer.
  • Delivered to you, in writing. Nobody from Vaulith contacts your carrier.

The first ten companies to buy the assessment get their findings read by the Vaulith team, with a written reply within five working days. The founding programme →

Why the number holds

A score you can defend to your own CISO.

No model decides it. 24 rules written from the carrier side of the table turn the facts of your estate into findings, each finding blocks specific questions, and the score is the arithmetic of those verdicts, printed on the page. The same facts produce the same number every time.

Boundaries

What Vaulith is not.

Stated plainly, because a product that estimates what a reviewer will think has to be precise about what it claims.

Not a compliance opinion, and not legal advice

It estimates reviewer friction. Whether you meet an obligation is a question for your counsel and your regulator, and Vaulith does not answer it.

Not a model monitoring or observability tool

We document that your testing happened and that someone independent checked the model. We do not watch the model. That is a different product and there are good ones.

Not SOC 2 automation

If you need continuous control monitoring across your cloud estate, buy one of the platforms built for it. Vaulith sits on top of whatever you already run.

Not a promise that a deal closes

A clean profile removes a reason to say no. It does not create a reason to say yes, and anyone selling you that is selling you something else.

Send the reviewer something they can close.

Three ways in: a free thirty-minute conversation, the automated assessment at $499, or a written engagement. What each one covers, and what the automated one cannot do.

What would be useful?
Your details are used to reply to you and for nothing else. See the privacy notice.