Modulos AG, a European-based AI governance platform provider, has announced that Agencija za zavarovalni nadzor (AZN), Slovenia's national insurance supervisory authority, has selected Modulos to govern its AI systems in compliance with the EU AI Act, NIS 2, DORA, and evolving EIOPA supervisory expectations. The EU AI Act, which entered into force on 1 August 2024 as the world's first comprehensive horizontal AI regulation, imposes risk-tiered obligations across the AI lifecycle, placing particular pressure on financial and insurance supervisors who must both enforce the rules and comply with them in their own operations.

The agreement makes AZN one of a growing number of European regulators and regulated institutions adopting Modulos as they prepare for the EU AI Act's phased compliance deadlines, including the Annex III high-risk system obligations scheduled to come into force on 2 December 2027.

"As a supervisory authority, we are not just responsible for ensuring compliance of insurance companies with the new legislation; we need to be compliant ourselves. We have selected the Modulos platform because we need to demonstrate rigorous, auditable oversight of any AI systems that we use," said Gorazd Čibej, Director of AZN.

In addition to internal governance, AZN plans to use the Modulos platform as an AI sandbox to accelerate testing and approval procedures for local insurance companies deploying new AI capabilities, as well as for other companies planning to launch insurance solutions powered by AI. The sandbox concept aligns with mechanisms explicitly envisioned under the EU AI Act, which encourages member states to establish controlled testing environments where high-risk AI systems can be developed and validated under regulatory supervision before market deployment.

Kevin Schawinski, Co-Founder and CEO of Modulos, commented on the partnership: "We built Modulos on the premise that AI governance shouldn't be a compliance afterthought bolted onto existing systems, but infrastructure organizations can trust from day one. AZN evaluated our platform with the scrutiny you'd expect from a supervisory authority, not just a buyer. Having that scrutiny result in a decision to work with us tells us we're building the right thing."

The deployment provides AZN with access to Modulos's core governance capabilities, including:

• Governance Graph and Scout: Real-time mapping and discovery of AI systems and their risk relationships across the organization.
• Cross-framework compliance mapping: Deduplicated control mapping across the EU AI Act, ISO 42001, and NIST frameworks, designed to reduce duplicate audit effort by an estimated 50%. Additional frameworks such as NIS 2 and ISO 27001 are also available.
• Monetary risk quantification: Financial exposure modeling expressed in monetary terms rather than a traffic-light matrix.
• Flexible deployment: Support for the security and data residency requirements commonly required by public-sector and regulatory bodies.

The announcement follows Modulos's inclusion in Gartner's inaugural Magic Quadrant for AI Governance Platforms report, published on 16 June 2026. It also builds on the company's earlier distinction as the first AI governance platform in Europe to achieve ISO 42001 product conformity, independently evaluated by CertX in 2024. The emergence of a recognized AI governance platform category reflects accelerating institutional demand as the EU AI Act's compliance windows narrow, with national supervisors across the bloc confronting the dual challenge of regulating AI adoption in the sectors they oversee while ensuring their own AI tools meet the same standards.

Kevin Shinners, SVP Commercial at Modulos, emphasized the significance of the selection: "When a supervisory authority chooses to govern its own AI systems with the same rigor it expects from the institutions it oversees, that's a meaningful signal for the market. AZN sits inside the EIOPA network, working every day with the standards our other customers are being held to. Their decision to work with us speaks directly to the maturity of our platform in a regulatory context, not just a commercial one."