Insurance

When the FCA asks about your claims decision, you must prove not just what you decided, but when you decided it.

A claims file assembled after a complaint is forensically identical to one completed at the time. immut proves the difference.

The problem

A claims file assembled after a complaint is forensically identical to one completed at the time.

The FCA and Financial Ombudsman Service do not ask whether your records are complete. They ask whether those records were created at the time the decision was made. Under Consumer Duty, insurers must be able to evidence fair outcomes on an ongoing basis. A claims decision, a pricing model change, or a compliance monitoring report that cannot be proven to predate the point at which it was convenient to produce it is, evidentially, indistinguishable from one that was not.

305,726
FOS complaints in 2024/25, the highest in six years; insurance upheld at 41%
Source: Financial Ombudsman Service, Annual Complaints Data and Insight 2024/25, published July 2025.
Real consequences

Companies have already paid the price.

FCA
Lloyds Bank General Insurance Ltd
£90.7M2021
PRA
U K Insurance Limited
£10.6M2026
FCA
Liberty Mutual Insurance Europe SE
£5.3M2018
Use cases

Where immut earns its keep in insurance.

Every one of these activities already happens in your claims, underwriting, actuarial, and compliance teams. immut adds a layer of independently verifiable proof to each one.

Use casePotential impact
Current process

Documenting each stage of a claims decision: initial assessment, investigation, coverage determination, and outcome, in the claims management system.

How immut helps

immut hashes the claims decision file the moment it is finalised, creating a blockchain-timestamped record on the XRP Ledger. If a customer later alleges the decision was fabricated after their complaint arrived, the timestamp is independently verifiable without relying on the insurer's own systems. The hash proves the document existed, unchanged, at the moment of creation.

Bottom line

Insurance complaints were upheld at 41% by the FOS in 2024/25, above the all-sector average of 34%. Liberty Mutual Insurance Europe SE fined £5.3M by the FCA in part for inadequate investigation records on declined claims (2018).

Source: FOS Annual Complaints Data and Insight 2024/25; FCA Final Notice, Liberty Mutual Insurance Europe SE, 30 October 2018.
How it works

Three steps. Seconds per file.

01

Hash the file.

immut generates a SHA-256 hash of your file on our servers. For sensitive workloads, dedicated servers are available so files stay inside infrastructure you control.

e.g. a claims decision file, policy document, or actuarial sign-off
02

Record on the public ledger.

The hash is committed to the XRP Ledger, a public blockchain, with a precise timestamp.

e.g. XRP Ledger, precise timestamp
03

Timestamped certificate.

immut returns a certificate of the record and its timestamp. Blockchain-anchored evidence of this kind has been accepted in courts across 88 countries and 171 jurisdictions.

e.g. anchored to the XRP Ledger, a public blockchain
Works with your whole stack

immut sits under the records your claims, underwriting, actuarial, and compliance teams already produce, in any tool. Files stay where they live; immut writes the proof that anyone can verify.

Source systems
TeamsSlackSharePointDriveGmailNotionGitHubFigmaSalesforceDropboxVanta
The proof layer
immutHash · Anchor · Verify
Verifiers
CustomerCourt / JudgeRegulatorAuditorInvestorInsurer
The four properties

Proof that satisfies the four properties regulators and courts require.

01
Contemporaneous

Timestamped at the moment of creation.

02
Tamper-evident

Any change after creation is detectable by mathematics.

03
Independently verifiable

A regulator, auditor, or court can verify without trusting you or your vendor.

04
Court-ready

Blockchain-anchored timestamps of this kind have been accepted as legal evidence in 88 countries across 171 jurisdictions.

Secondary benefit · IP

Prove it without publishing it.

Because only the hash is ever made public, underwriting models, pricing algorithms, and claims decision methodologies can be proven to exist on a given date without disclosing the underlying logic or any commercial sensitivity. Public proof. Private work.

How immut protects insurance IP
FAQ

Common questions about immut in insurance.

Your file is hashed with SHA-256 on immut's servers, and only the hash is committed to the XRP Ledger. The hash is a fixed-length string that cannot be reversed to recover the file, so no policyholder data, no claims details, and no commercially sensitive information ever leaves your infrastructure. For sensitive workloads, immut offers dedicated servers so files stay inside infrastructure you control.

Blockchain-anchored timestamps of the kind immut produces have been accepted as legal evidence in 88 countries across 171 jurisdictions. The four properties regulators require (contemporaneous, tamper-evident, independently verifiable, court-ready) are satisfied by construction, not by policy. For a detailed analysis of how immut supports FCA Consumer Duty and Solvency II obligations, see the compliance evidence page.

immut is an independent layer alongside your claims management system, document management platform, and compliance infrastructure. It is not a replacement. Your internal records are controlled by your own infrastructure. A FOS investigator or FCA supervisor can question whether they were altered. immut's timestamp lives on a public blockchain that neither you nor your vendor nor immut itself can change. It provides the independent verification that internal systems structurally cannot.

Because the proof lives on the XRP Ledger, a public blockchain no single party controls, every certificate already issued remains independently verifiable by any court, regulator, or auditor in the world. This continues indefinitely, without immut's continued existence.

Start

Start proving your records today.

Only the hash is ever made public.