Compliance 360

Compliance across both halves of the fabric: customer-side KYC currency on real policyholder records, and data-side PII exposure, regulated data elements and open governance findings from the live catalog — plus IRDAI obligations including the Fraud Monitoring Framework.

Generali Central Insurance Company Limited · FY25 (Mar'25, audited)

Mid-tier private multiline general insurer — Top-10 private (rank ~10)

2,644 employees · 167 branches · 21,000+ agents

🌐 Enterprise 360 modules· on Compliance 360Browse all 51 views ▾

✅ Todayyour decision queue 📨 Activity & Digestaudit trail · @mentions 🧭 360 Directoryall views by persona 🗺 Guided Journeyspersona flows · step-by-step 🛰 Control Towercommand center 🎯 Strategy & Goals4 pillars · OKRs 💎 Value Creation Planturnaround · value 🤖 AI Use Casesrecommend & act 🌐 Enterprise 360the consolidated pane 📈 New Business & Underwriting 360funnel · forecast 🚗 Motor 360OD vs TP · classes · claims 🏥 Health 360retail vs group · ICR · cashless 🛡 Fraud & SIU 360leakage · detection · recovery 🛰 Market & Industry Intelsignals · growth initiatives 🏛 Company Hierarchyorg · lines · entities 🗂 Org Roll-up 360zone · line · branch 📍 Branch & Distribution 360branch twin · sourcing · zones 👥 Channels & Customers 360channels · cross-sell 🧩 Customer Mastergolden record · MDM 🧾 Quote & Proposal 360proposals by line 🔄 Quote-to-Premium 360quote-to-premium cycle 🔁 Claims & Renewals 360claims · cashless · renewals 🔧 Case / Project 360delivery · case handling 👷 Workforce 360people · productivity 🏷 Products & Lines 360products · loss ratio 🧩 Programs & Digital 360PMO · workstreams · go-live 🤝 Growth Initiatives 360initiatives · investment · ROI 🚪 Turnaround & Growthcombined ratio · solvency · ₹10k cr 🚚 Reinsurance & Network 360reinsurers · hospitals · garages 💰 Finance 360P&L · combined ratio 💵 Cash 360premium · float · investments 🧬 Ontology & Meshlogical layer · data products ▤ Evidencedrill-to-record · export 🩺 Data Healthfreshness · lineage 🕸 SciKIQ Data Fabriclive catalog · PII · scans 🧠 SciKIQ Fabric Mapthe whole architecture 📄 Policy 360live policies · lapse score 🧾 Claim 360live claims · severity · fraud 🏥 Hospital & Provider 360network · anomaly score 🤝 Agent & Broker 360distribution · portfolio quality ⚖ Compliance 360KYC · PII · obligations 🎛 Simulationdeterministic what-if 📑 Document Intelligencebills & estimates → structure 🔌 Connectorswhat is actually wired 📋 Underwriting & Pricing AIrules decide · model explains 🧭 Coverage Reasoningliability · payable · rules 🔁 Lapse, Retention & Sales AInext best action · cross-sell · leads 🕸 Fraud Network Analysishubs · co-occurrence · concentration ⚙ Decision Stacksee → predict → act 🤖 AI Agentic Workforce10 always-on agents 📚 Data Catalogterms · CDEs · glossaries

Customer side

KYC currency & onboarding gaps

LIVE · PostgreSQLpostgres · demo_bfsi3 msread-only session

Policies in force behind customers whose KYC is expired, rejected or pending — the exposure a regulator asks about first.

1,500

KYC checks on file

4 status types

27%

Verified

411 checks

Customers with gaps

expired · rejected · pending · high risk

₹13,96,237

Premium behind gaps

in-force premium at risk

Verification status

VERIFIED411

PENDING377

REJECTED364

EXPIRED348

Highest-value customers with a KYC or risk gap

Customer	KYC	Risk	Policies	Premium
Sandeep Chauhan	PENDING	LOW	4	₹68,314
Harish Shinde	REJECTED	LOW	3	₹62,220
Deepa Saxena	PENDING	LOW	4	₹61,082
Nisha Khandelwal	REJECTED	LOW	3	₹55,527
Rahul Yadav	PENDING	MEDIUM	4	₹50,991
Ritu Chauhan	REJECTED	LOW	3	₹49,790
Sneha Jadhav	REJECTED	LOW	3	₹49,167
Neha Gokhale	EXPIRED	MEDIUM	2	₹48,821
Smita Kulkarni	EXPIRED	MEDIUM	3	₹48,463
Suresh Joshi	VERIFIED	HIGH	3	₹47,686

Live rows: 1,500 KYC check records read from demo_bfsi.kyc_check + customer in PostgreSQL at request time. These are genuine records with genuine structure, but they are synthetic demo data, not Generali Central's book — status distributions are near-uniform, and person, provider, branch and payer names are localised to Indian display names at read time. Scores demonstrate the scoring mechanism, not predictive performance. The reconciled ₹5,548 Cr figures elsewhere in this cockpit come from the governed SQLite book.

Data side

PII exposure & open governance findings

LIVE · PostgreSQLpostgres · datagov_meta3 msread-only session

What the catalog knows about sensitive data in the estate, and the findings still open against it.

Open findings

2 critical · 73 high

Assets with PII

77 PII columns

Regulated data elements

of 60 CDEs reviewed

70%

FMF-2025 readiness

effective 1 Apr 2026 · modeled

Critical · Medical Diagnosis / Procedure (Health) in clear text: med_mart.claim_extract.icd10_cdmed_mart.claim_extract

Column classified as 'Medical Diagnosis / Procedure (Health)' (GDPR (EU): Special Category Data (Art. 9) | PCI-DSS v4 (Payments): Cardholder Data (CHD)) under GDPR (EU) + PCI-DSS v4 (Payments). Sampled values are stored unmasked (pattern: A99). Required: Suppress or generalise to chapter level; strict need-to-know access

Basis: Art. 9 - processing prohibited without explicit condition; Art. 32 - security of processing | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

Critical · Medical Diagnosis / Procedure (Health) in clear text: med_his.adm_dtl.icd_cdmed_his.adm_dtl

Column classified as 'Medical Diagnosis / Procedure (Health)' (GDPR (EU): Special Category Data (Art. 9) | PCI-DSS v4 (Payments): Cardholder Data (CHD)) under GDPR (EU) + PCI-DSS v4 (Payments). Sampled values are stored unmasked (pattern: A99.9). Required: Suppress or generalise to chapter level; strict need-to-know access

Basis: Art. 9 - processing prohibited without explicit condition; Art. 32 - security of processing | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

High · Policy Monetary Value in clear text: med_mart.claim_extract.claim_amtmed_mart.claim_extract

Column classified as 'Policy Monetary Value' (GDPR (EU): Personal Data | PCI-DSS v4 (Payments): Cardholder Data (CHD)) under GDPR (EU) + PCI-DSS v4 (Payments). Sampled values are stored unmasked (pattern: 9999999.99). Required: Access-restrict; not an identifier - retain for actuarial/claims use

Basis: Art. 5(1)(f) integrity & confidentiality; Art. 25 data protection by design; Art. 32 | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

High · Claim Number in clear text: med_mart.claim_extract.claim_idmed_mart.claim_extract

Column classified as 'Claim Number' (GDPR (EU): Personal Data (indirect identifier) | PCI-DSS v4 (Payments): Cardholder Data (CHD)) under GDPR (EU) + PCI-DSS v4 (Payments). Sampled values are stored unmasked (pattern: AAA999999). Required: Tokenise / pseudonymise in non-production

Basis: Art. 5(1)(f) integrity & confidentiality; Art. 25 data protection by design; Art. 32 | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

High · Medical Record Number in clear text: med_mart.claim_extract.mrnmed_mart.claim_extract

Column classified as 'Medical Record Number' (GDPR (EU): Personal Data | PCI-DSS v4 (Payments): Cardholder Data (CHD)) under GDPR (EU) + PCI-DSS v4 (Payments). Sampled values are stored unmasked (pattern: AA999999). Required: Tokenise; encrypt at rest; need-to-know access

Basis: Art. 5(1)(f) integrity & confidentiality; Art. 25 data protection by design; Art. 32 | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

High · Policy Monetary Value in clear text: med_mart.claim_extract.approved_amtmed_mart.claim_extract

Column classified as 'Policy Monetary Value' (GDPR (EU): Personal Data | PCI-DSS v4 (Payments): Cardholder Data (CHD)) under GDPR (EU) + PCI-DSS v4 (Payments). Sampled values are stored unmasked (pattern: 999999.99). Required: Access-restrict; not an identifier - retain for actuarial/claims use

Basis: Art. 5(1)(f) integrity & confidentiality; Art. 25 data protection by design; Art. 32 | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

High · Policy Number in clear text: med_mart.claim_extract.policy_nomed_mart.claim_extract

Column classified as 'Policy Number' (GDPR (EU): Personal Data (indirect identifier) | PCI-DSS v4 (Payments): Cardholder Data (CHD)) under GDPR (EU) + PCI-DSS v4 (Payments). Sampled values are stored unmasked (pattern: AAA999999999). Required: Tokenise / pseudonymise in non-production

Basis: Art. 5(1)(f) integrity & confidentiality; Art. 25 data protection by design; Art. 32 | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

High · Policy Monetary Value in clear text: med_mart.pat_360.tot_bill_amtmed_mart.pat_360

Basis: Art. 5(1)(f) integrity & confidentiality; Art. 25 data protection by design; Art. 32 | Req 3 - protect stored account data; Req 7 - restrict access by business need-to-know

Data catalog & CDEs →Data-quality results →

Regulatory