Insurer outsourcing: retained control and oversight

France: identify outsourced function, perimeter and materiality under L354-3. Switzerland: establish the relevant insurer function and business-plan scope separately; storing data and delegating an important function are not classified by the word cloud alone.

France: the insurer retains responsibility within L354-3’s framework. Switzerland: document retained responsibility under the applicable insurer outsourcing framework; a supplier contract does not prove transfer of every supervisory duty to that supplier.

France: map providers, subcontractors and actual delegated tasks to agreements. Switzerland: retain the corresponding outsourcing inventory and dependencies; group relationship or product name does not describe the complete chain of responsible actors.

France: connect cooperation, information access and audit commitments to the actual function. Switzerland: the applicable FINMA outsourcing circular has its own control-access requirements; a generic commercial clause does not demonstrate every relevant supervisory right.

France: retain continuity plans, incident records and tested supervision evidence. Switzerland: preserve corresponding operational-risk and continuity documents; an untested exit plan is not proof of recovery, and specific reporting triggers require separate checking.

France: this task concerns retained insurer responsibility and supervisory control. Switzerland: keep the same boundary from technical cloud migration or data export; neither a successful transfer nor a signed supply contract proves blanket prudential compliance.