OneShield Becomes First Insurance Software Vendor Certified Under CSA’s AI Controls Matrix, Setting New Standard for Secure AI in Cloud-Based Insurance Systems
OneShield, a leading provider of SaaS core systems for the insurance industry, has become the first insurance software vendor to achieve certification under the Cloud Security Alliance’s (CSA) AI Controls Matrix (AICM). The AICM is the industry’s first comprehensive framework for evaluating the security, accountability, and ethical governance of artificial intelligence systems in cloud environments. This milestone underscores OneShield’s commitment to delivering secure, compliant, and innovative solutions. The certification provides insurers, managing general agents (MGAs), and brokers with added confidence that their core systems and AI-driven workflows are protected within an independently validated, secure cloud infrastructure. Tony Villa, CEO of OneShield, said, “Insurers are placing greater emphasis on transparency, data protection, and vendor assurance. Adopting the AI Controls Matrix helps us demonstrate that our cloud practices align with globally recognized standards, giving our customers greater confidence as they modernize their operations and explore new AI capabilities.” The CSA AICM evaluates more than 200 control objectives across key areas such as data protection, access management, business continuity, encryption, model transparency, bias mitigation, human oversight, and third-party risk. OneShield’s certification ensures that its systems meet rigorous benchmarks for responsible AI deployment. Doug Moore, Chief Innovation Officer at OneShield, emphasized the significance of the certification for the company’s AI Hub—a platform designed to help insurers safely implement responsible AI and intelligent automation. “By aligning the Hub with the AICM, we are ensuring that every workflow and integration is built on a foundation of trust, compliance, and verified security,” he said. For insurers, the AICM certification is increasingly vital as regulatory scrutiny grows around cloud adoption and AI use. It offers assurance that OneShield’s systems adhere to internationally recognized standards for AI governance and cybersecurity. This achievement also strengthens OneShield’s broader strategy toward SOC 2 compliance for its AI Hub and related services. By integrating AICM controls, the company is enhancing its documentation, governance, and security practices—key components of future SOC 2 attestation. The Cloud Security Alliance (CSA) is the world’s leading organization promoting best practices for secure cloud computing. Its Cloud Controls Matrix (CCM) serves as a trusted benchmark for cloud security, helping organizations meet compliance requirements across industries. The CCM is widely adopted by enterprises and governments globally. OneShield delivers comprehensive SaaS platforms tailored for property and casualty insurers and MGAs of all sizes. Its solutions include policy administration, billing, claims management, rating, product configuration, relationship management, business intelligence, and smart analytics—supporting over 90 lines of business across personal, commercial, and specialty insurance. With headquarters in Marlborough, Massachusetts, and offices in India, OneShield serves some of the world’s largest insurers. Clients benefit from optimized workflows, pre-built content, seamless upgrades, collaborative implementations, and cost-effective pricing models designed to reduce total ownership costs. For more information, visit www.OneShield.com.
