Business scope and permission boundaries
Risk transfer is a collective term for structural and business arrangements. Choosing ISPV, MISPV or another legally permitted structure does not constitute a single standalone licence.
Insurance risk transfer structures are a broad commercial category, not a single ISPV or ILS licence. Before applying, distinguish RAO13A's ISPV/MISPV, entities actually assuming insurance or reinsurance liabilities, and arrangements providing only distribution, administration or technology services. Capital, documentation, personnel, processes and reporting requirements apply according to the actual activities. Information was checked on 2026-11-07; approval, pricing, investment returns or physical office premises cannot be guaranteed.[1] [13] [18]
The first route is ISPV/MISPV: accepting risk from insurance or reinsurance entities and fully funding liabilities through debt or other financing mechanisms, applying for RAO13A insurance risk transformation permission, and meeting financing, risk transfer, subordination and SOP conditions. ILS describes a risk-financing instrument or structure; it does not create a separate, freely tradable ILS licence.[13] [18]
The second route is an insurance/reinsurance entity: where it substantively enters into or performs insurance contracts and bears liabilities on its own balance sheet, the corresponding Part 4A insurance permissions, contract classes and prudential regime should be checked. It cannot instead be treated as ISPV merely because the contract also transfers risk. The third route is a pure service arrangement: where the entity only arranges, distributes, administers or provides technical support without assuming risk, assess FCA permissions, delegated relationships or whether it falls outside the regulatory perimeter according to the actual activities. This neither automatically confers PRA authorisation nor means a blanket exemption from licensing.[1] [3]
Names such as sidecar, cat bond, collateralised reinsurance, MGA or risk platform cannot alone determine the route. For non-insurance cedants and the expansion of PCC underwriting scope, the commencement status of reforms must still be assessed. Broad commercial categories do not establish that any entity may cede risk directly to ISPV.[13] [18]
Application value and choice of route
Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.
Identifying the correct route first avoids structuring a transaction under the wrong licensing and capital framework. ISPV financing, conventional underwriting and service-only routes each have their own boundaries of responsibility. Choosing the appropriate structure enables counterparties to understand who actually bears losses, but does not automatically confer tax advantages or capital relief.[1] [13] [18]
Eligible ISPV may obtain capital-market risk financing, while traditional insurance or reinsurance entities assume liabilities within their authorised insurance permissions. The two may form a transaction chain, but vehicle authorisation, the cedant’s capital treatment and investor securities permissions must not be treated as a single approval.[13] [14]
A service-only provider may use appropriate distribution or delegated arrangements rather than establish its own underwriting balance sheet, but whether FCA permission or other arrangements are required depends on the substance. There is no universal advantage under which all risk transfer projects have low capital requirements, rapid licensing or exemption from regulation.[1]
Application conditions and entry requirements
Submit a legal and business perimeter analysis identifying who bears risk, who pays claims, who the cedant is, who provides funding and each participant’s activity permissions. Classify the application as ISPV/MISPV, insurance/reinsurance or pure services; do not judge solely by the commercial name.[1] [13] [18]
The ISPV route must satisfy full funding, effective risk transfer, subordination of financing providers' rights, both regulators' threshold conditions and the non-public SOP. MISPV adds conditions for multiple arrangements and segregation. Transactions outside scope require a prior VoP application; retrospective notification cannot substitute for permission.[13]
The insurance/reinsurance route must map RAO contract classes to permissions for effecting/carrying out contracts and explain the prudential regime actually applicable. Prepare SCR/MCR and ORSA where the corresponding insurance regime applies. Non-Directive firms, overseas branches and other special entities cannot unconditionally use the same capital and governance materials; nor can full funding of ISPV be treated as a substitute for ordinary underwriting permission.[1] [3] [4] [5]
The service-only route requires analysis of whether distribution, arranging, administration and access to money or assets constitute regulated activities, and verification of FCA permissions or lawful delegated/AR arrangements. Delegated services and AR do not make the service provider itself bear insurance risk or automatically confer ISPV or underwriting permissions.[1]
Contracts, payment priorities, ownership of funds, termination and enforceability under each route should align with reporting responsibilities. Service providers and entities actually bearing risk must not be treated as interchangeable in marketing or contracts, and investors must recognise that their principal is at risk rather than guaranteed.[13] [18]
A shared platform should explain governance, conflicts, records and regulatory access; multiple arrangements under ISPV also require evidence of segregation. Evidence of the operation of purely technical arrangements cannot be described as regulatory authorisation, and the insurer's own responsibilities cannot be transferred entirely to MGA or other service providers.[1] [13]
Conduct rules such as Consumer Duty should be assessed within their respective scope only where applicable retail insurance business is involved. They must not be applied unconditionally to all reinsurance, large risks or ISPV investment and financing transactions, nor should all commercial structures be treated as entirely free of conduct obligations.[34]
List regulatory application fees, ongoing fees, risk financing and professional service costs separately. This general category has no uniform minimum capital, fee rate, number of SMF, practical preparation timetable or guaranteed approval conditions; updated reform announcements and consultations from 2026 do not replace the statutory scope already in force.[13] [18]
Shareholders, directors and key personnel
Staffing follows the chosen route first. ISPV/MISPV management must be able to oversee risk contracts, financing, investor subordination, SOP and reporting. Multiple arrangements additionally require control of segregation and new transaction notifications. Use the current ISPV-specific SMR and applicable FCA Controlled Function forms; do not guess uniform reference numbers or headcounts.[13] [14]
The actual insurance/reinsurance entity applies and maintains compliance under its applicable governance, key function and senior management regimes; role requirements for ordinary insurers cannot be applied unconditionally to ISPV or pure service providers. Pure service entities allocate capabilities and responsibilities according to their own FCA regime, actual duties and delegated arrangements, and do not automatically become entities subject to the PRA insurance senior management regime merely because they are called a 'risk transfer institution'.[1] [33]
Distinguish shareholders, financing investors and service participants; control is assessed by actual equity, voting and influence rights. Changes to control or senior management of a dual-regulated authorised entity must follow the corresponding prior approval procedures. Do not equate all bond investors with controllers or treat advisers or nominee directors as actual governance.[13] [25]
Capital and financial resources
There is no uniform capital figure for this business category. Under the applicable rules, ISPV/MISPV must support its maximum aggregate risk exposure and expenses with eligible assets, be able to pay amounts when due, and maintain effective risk transfer and subordination of financing rights. Assets segregated for MISPV arrangements or cells cannot be used interchangeably at will; PS9/25 returns and a financing grace period of up to 30 business days apply only where the conditions are met, and do not constitute general unfunded underwriting.[13] [14] [18]
Actual insurance/reinsurance entities use their applicable prudential capital regime, calculate and cover SCR/MCR where Solvency UK applies, and arrange operational and other financial resources. Non-Directive and special entities follow their corresponding rules; ordinary capital figures must not be treated as thresholds for all risk-transfer projects.[4] [5]
For service-only arrangements, assess financial resources against the actual regulated activities, money and assets, and business scale. Full ISPV funding or ordinary insurance SCR/MCR must not be required unconditionally, nor should service-only business be described as necessarily requiring zero capital. Risk financing, entity equity, operating budgets and regulatory fees should be calculated separately; pricing and funding eligibility require case-by-case confirmation.[1] [13]
Registered office and operational substance
First determine the legal entity and actual route, then identify the locations of the registered office, management decision-making, records, account control and key service providers, demonstrating that the relevant regulator can supervise effectively. ISPV/MISPV should make transaction and individually segregated information accessible. Insurance or reinsurance entities must demonstrate substance according to their legal form and head office or branch requirements; service-only arrangements must demonstrate operations under their own regime, rather than sharing an unapproved address template.[1] [2] [13]
This material does not approve actual offices or rental arrangements and provides no uniform conclusions on floor area, lease terms or UK residence for all senior managers. A consultant's address, forwarding address or domain name cannot replace the applicant's statutory and actual business information. Cross-border structures should explain responsibilities and data access limitations rather than merely list a UK postcode.[13]
Application document checklist
First submit an explanation of the business and legal perimeter, diagrams of risk assumption and fund flows, and a list of each entity’s permissions and contracts, demonstrating why the ISPV, insurance/reinsurance or service-only route is used. Assess other participants separately where securities and investment services are involved; do not treat the ILS designation as the sole permission.[1] [13] [18]
The ISPV/MISPV route uses the dedicated ISPV standard form or, where eligible, accelerated form and supporting documents. Submit risk transformation contracts, financing issuance and subscription documents, evidence of paid-in funding and subordination, maximum exposure and expenses, asset valuation and payment analyses, investment custody arrangements and the scope of SOP. Multiple arrangements also require evidence of segregation; PCC registration information is submitted only where applicable.[13] [14]
The actual insurance/reinsurance entity submits its relevant insurance application, corporate governance, product liability, funding and risk information; SCR/MCR, ORSA and other capital reports are prepared only where that entity's regime applies. Ordinary NISU materials are used for that underwriting route, not as the starting point for ISPV or pure services.[1] [4] [5] [7]
For service-only arrangements, prepare the corresponding FCA application or evidence of a lawful delegated relationship, explaining service contracts, duties, customer types, risk bearers and powers over money and assets. A technology or commercial cooperation contract is not itself underwriting authorisation, nor does this general category confer AR or any exemption by default.[1]
Each route requires information on the entity, ultimate control and sources of funds, management responsibilities and fitness and propriety. ISPV uses dedicated SMR and applicable FCA Controlled Function forms. Insurance entities and other FCA service providers prepare materials under their own regimes, rather than submitting a fictitious unified SMF list.[13] [25] [33]
Provide ongoing monitoring, service provider oversight, reporting and exit performance arrangements matching the chosen route; ISPV uses dedicated annual qualitative/quantitative templates, while event notifications must additionally be designed for MISPV. Insurers and service providers each follow their own reporting requirements; do not submit a standard insurance capital package for all businesses.[13]
Set out evidence of payment of regulatory application fees and an itemised budget. The final checklist is subject to the official forms and case-specific requirements of the selected route; this general category must not be treated as a single application form, standard audit package or uniform pricing scheme.[1] [13]
This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.
Application process and key steps
First distinguish responsibilities and regulatory boundaries, determining whether the applicant is a risk transformation vehicle, an actual insurance or reinsurance entity, or a service-only provider, while checking the permissions required by each transaction participant. Do not launch an application for a supposed unified risk transfer licence before establishing the route.[1] [13] [18]
ISPV/MISPV uses a dedicated five-stage process: read the ISPV rules and SoP, optionally hold a joint pre-application meeting with both regulators, and submit electronically to ISPVMailbox@bankofengland.co.uk using the dedicated forms; do not replicate ordinary NISU or bank application milestones.[13]
The actual insurance/reinsurance entity applies to PRA for the relevant insurance permissions and obtains FCA consent, using its applicable ordinary or special application route; pure service providers use FCA or lawful delegated arrangements according to their actual activities, and do not automatically move to the PRA underwriting procedure.[1] [7]
During the review, respond to questions on personnel, contracts, capital or financing, effective supervision and other matters under the selected regime. ISPV is reviewed by both parties, with SOP agreed case by case. Insurers are reviewed under the actual insurance risk regime, and service providers according to their own activities; evidence for one cannot substitute for the other.[1] [13]
After obtaining the relevant approval or lawful basis for business, conduct only permitted activities and establish the respective reporting and event controls. MISPV may use new-risk notifications only within SOP; going beyond that scope first requires VoP. Changes to underwriting and service entities follow their own permissions and regulatory procedures.[13]
Approval deadlines and project timelines
There is no uniform actual approval timeframe for this category. Under the verified section 55V of FSMA, new applications for ISPV/MISPV and the corresponding Part 4A have a decision period of six months from receipt of a complete application, or twelve months from initial receipt for an incomplete application. Any specific statutory exceptions must be confirmed by activity; a decision deadline does not guarantee approval. The ten-business-day target for complete applications under the eligible ISPV accelerated route does not apply to all risk transfer structures.[8] [14]
Actual underwriters follow their applicable ordinary or special routes and service targets separately; pure services may involve different FCA applications, delegated-service preparations or no equivalent authorisation, and their timeframe cannot be inferred from underwriters' deadlines. Transaction documents, financing, systems and team preparations are independent of the formal application clock; no uniform period from consultation to launch has been verified here.[1] [7] [13]
The MISPV/PCC five- or ten-working-day periods relate to the corresponding event notifications, not fast approval of all applications. Fees for each route must be checked against current applicable rates, and risk financing is not an application fee. No quote, premises, transaction completion date or approval outcome is guaranteed.[13]
Changes to shareholders, directors and permissions
Before making changes, reassess whether the substantive activity will change. A pure service provider beginning to assume risk itself may need new underwriting or risk transformation permissions; converting ISPV into ordinary underwriting cannot be achieved merely by changing the trading name. New activities, contracts or customers should be assessed under the relevant regime for VoP or new authorisation, rather than using one change form for all structures.[1] [13]
ISPV/MISPV must check the non-public SOP and use the dedicated ISPV VoP for matters outside scope. New MISPV risks within scope require PRA notification within five working days; inter-cell arrangements require PRA notification within five working days; and new PCC cells require FCA notification within ten working days. Notification does not remove the requirement for evidence of funding, subordination and segregation.[13]
Obtain required approvals for shareholder and senior management changes in advance under the control and function regimes applicable to the actual entity. Applicable control notifications for dual-regulated authorised entities are led by PRA; a pure service entity regulated by FCA follows its own procedures. Do not equate every change of financing investor or adviser with corporate control, or company registration with regulatory approval.[13] [25]
Ongoing compliance and annual maintenance
ISPV/MISPV must continually verify full funding, risk transfer, investor subordination, SOP and segregation of arrangements, and submit annual qualitative and dedicated quantitative reports to PRA, with quantitative reports submitted through BEEDS. MISPV/PCC event notifications must be made separately; ordinary insurance quarterly SCR/MCR, ORSA or SFCR must not be treated as a universal checklist.[13]
Actual insurance/reinsurance entities maintain capital, governance, risk management and reporting under their own prudential and conduct regimes, using corresponding requirements such as SCR/MCR only where Solvency UK applies. Pure service providers maintain arrangements according to their own activities, clients, funds and assets, and fiduciary relationships. The name of this general category neither automatically subjects them to all PRA insurance rules nor automatically exempts them from FCA conduct requirements.[1] [4] [5]
Each entity maintains service-provider oversight, accounting, regulatory records, material incident handling and the ability to continue meeting its obligations. Financial statements, statutory audits and audits of regulatory reports differ by entity and applicable rules; no uniform audit conclusion is made for all structures. Reforms, commencement dates, fees and exit requirements should be checked continuously for each route. Ceasing new transactions does not end responsibilities while contracts remain in force.[13]
Acquisition due diligence and transaction considerations
First determine whether the proposed acquisition is a ISPV/MISPV vehicle, an insurance or reinsurance underwriting company, a service-only company, or merely a particular financing security or contractual interest. Check permissions, liabilities and control separately; do not price all targets alike under the label ‘risk transfer licence’.[1] [13]
ISPV due diligence checks the non-public SOP, risk contracts, paid-in funds, asset availability, investor subordination and outstanding liabilities. MISPV additionally requires checks on segregation and notifications for each arrangement. Ordinary underwriting targets also require checks on policies, provisions, reinsurance and corresponding capital records; pure service targets require checks on actual FCA permissions, delegated contracts and responsibility for funds and assets. One set of SCR/MCR checks must not be treated as universal due diligence for all three types of target.[1] [4] [13]
Before completion, identify applicable change-in-control approvals, management changes and counterparty consents; obtain separate permissions for new activities. A complete change-in-control notification normally has a sixty-working-day assessment period, which may be interrupted by law. This is not a uniform overall timetable for every target or a guarantee of approval. Transaction assets and contracts do not automatically become freely transferable authorisations through a share sale.[25] [27]
View the complete process for acquiring a licensed companyBusiness segments and applicable regimes
The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.
Frequently asked questions
Is an insurance risk transfer entity another type of ISPV licence?+
This is a broad commercial category. Where the substance is RAO13A, use ISPV/MISPV; genuine insurance or reinsurance underwriting requires the corresponding insurance permissions. For services alone, assess FCA or fiduciary arrangements; there is no single ISPV licence covering every structure.[1] [13] [18]
Does calling something a cat bond or sidecar necessarily make ISPV applicable?+
The name alone is insufficient. The cedant, risk assumption, financing, contracts and entities must be checked, and the conditions under RAO13A and SOP confirmed. Approval of the vehicle cannot replace securities or investment services permissions required by other entities.[13] [18]
Are all risk transfer projects submitted to SCR and MCR?+
No. SCR/MCR is prepared only where the corresponding insurer regime applies. ISPV demonstrates full funding, risk transfer and subordination, with multiple arrangements also demonstrating segregation. Pure service businesses are assessed under their own financial resources regimes; a uniform capital package does not apply.[4] [5] [13]
Can all projects be fast-tracked within ten working days?+
No. That target applies only to complete applications under the accelerated route for qualifying ISPV. Ordinary underwriting, pure servicing and ineligible structures cannot automatically use it, and the target itself does not guarantee approval.[14]
Can MGA or AR directly assume risk?+
Service, distribution or AR status cannot replace the permissions required to assume insurance risk in practice; liability must still be borne by an appropriately authorised entity. Confirm the actual activities and principal arrangements of MGA or AR separately rather than treating them as low-capital insurers.[1]
Is there a blanket exemption from auditing and reporting?+
There is no such general conclusion. ISPV has dedicated annual qualitative and quantitative reports, while MISPV has separate event notifications. Insurance entities and service providers each comply with their own regimes. Audit scope depends on the legal entity and current applicable conditions; no uniform rule should be invented.[13]
Official basis and verification sources
Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.
Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services