Back to Insights
Insurance Innovation6 min readOctober 2026

Embedded Insurance Governance in Singapore: Who Owns the Risk?

RC

Raymond Cheung

Chartered Actuary · CRO · Board Adviser · Singapore

Embedded insurance governance in Singapore is a board question, not a distribution detail. The platform owns the customer; the insurer still owns the conduct risk. Here is where embedded partnerships fall between committees and what boards should see.

When I was at Grab, I watched insurance go from a line in a partnership deck to something attached to millions of rides, deliveries and driver earnings, often without the customer ever thinking of it as buying insurance. The commercial logic was obvious. What took longer to settle was a simpler question. When a claim was mishandled, a premium was wrongly charged or a customer did not understand what they had bought, whose problem was it? The platform's, because the customer was theirs? Or the insurer's, because the policy was? [CONFIRM with Raymond: replace with a real episode if possible]

That question has not gone away. Embedded insurance, meaning cover sold inside another company's product or checkout, is one of the fastest-growing distribution channels in Singapore and across the region. Travel cover at airline checkout, device protection on an electronics purchase, income protection for gig workers, shipping cover on marketplace orders. For insurers it means volume they could never reach through agents. For boards it means a growing share of the book is sold, explained and serviced by someone the insurer does not employ.

What MAS has said, and what it has not

In February 2026, MAS was asked in Parliament whether the Insurance Act should be amended to protect consumers as insurers partner e-commerce platforms. The answer was that current safeguards are adequate. Financial institutions and their intermediaries must uphold proper conduct and consumer safeguards, general insurance agents must be registered with the General Insurance Association's Agents' Registration Board, and MAS will keep the landscape under review and add safeguards if needed.

I read that answer carefully. MAS did not create a new rule for platforms. It left the obligation where it already sits: on the regulated institution. If the platform's checkout misleads a customer, the conduct failure belongs to the insurer that chose the platform. That is the governance point most boards miss.

“The platform owns the customer relationship. The insurer still owns the conduct risk, and MAS will look to the insurer's board first.”

Where embedded insurance falls between committees

In the boards I advise, embedded insurance usually arrives as a growth story. The strategy paper shows gross written premium, partner pipeline and acquisition cost. The risk paper, if there is one, treats each partnership as a vendor arrangement. Neither describes the full risk. I see the same four gaps repeatedly.

  • Conduct risk sits in someone else's interface. The insurer did not design the checkout flow, the pre-ticked box or the one-line product description, but it answers for whether customers understood what they bought.
  • Data flows both ways and nobody owns both ends. Customer data passes between platform and insurer, which brings in technology risk and breach-notification obligations that run on the insurer's clock, not the partner's.
  • Concentration builds quietly. One large platform can become a material share of new business within a year. If that partner renegotiates commission or switches insurer, the business plan falls over.
  • Complaints arrive at the wrong door. Customers complain to the platform first. If the insurer never sees those complaints, its own complaints data understates the problem.

The last point links directly to MAS's recent work on complaints management at banks and insurers. A board that only sees complaints received by the insurer is looking at a partial picture of an embedded book, sometimes a very small part of it.

Outsourcing, distribution or partnership? The label matters

Part of the confusion is classification. Depending on what the platform actually does, the arrangement may be a distribution relationship, an outsourcing arrangement, or both. If the platform handles onboarding, policy servicing or claims notification, parts of it may fall within MAS's outsourcing expectations, with the due diligence, audit access and exit planning that implies. If customer data and system integration are involved, the technology risk requirements apply too.

I have seen an insurer file a partnership under business development when half of it was really outsourced customer servicing. Nobody had made a bad decision. Nobody had made a decision at all. The label decides which controls apply, so the board should ask who decided the label, and on what basis.

What I would expect a board to see

Embedded insurance does not need a new committee. It needs existing governance applied to it deliberately. For a material embedded book, I would expect the board or its risk committee to see five things.

  • A single register of embedded partnerships, showing premium, customer numbers, product types and how each arrangement has been classified.
  • A conduct view of each major partner: how the product is presented, what customers see before they pay, claims ratios, cancellation rates and complaints, including those received by the partner.
  • Concentration limits written into the risk appetite before the exposure builds: the maximum share of new business any single partner may represent.
  • A tested exit plan for each material partner, covering what happens to in-force policies, customer data and servicing if the partnership ends.
  • One named senior manager accountable for each material partnership end to end, not a commercial owner and a separate risk owner who never meet.

Of all the indicators, the claims ratio is the one I watch most closely. An embedded product with an unusually low claims ratio is often not a great product. It can mean customers do not know they are covered, or do not know how to claim. That is good for this year's margin and bad for the regulatory conversation three years from now. As an actuary, I would rather see a claims ratio I can explain than one that looks too good.

The question to ask at your next meeting

If you sit on an insurer's board, ask management one question: if our largest embedded partner made a conduct mistake tomorrow, how would we find out, and how long would it take? If the honest answer is that we would hear about it when a customer complains to MAS, the governance is not yet in place.

I want Singapore insurers to do more embedded insurance, not less. It is one of the few channels that can close protection gaps for gig workers and younger customers who will never sit down with an agent. But the board has to govern each partnership as an extension of the insurer's own conduct, not as someone else's channel. If you are working out how to bring embedded partnerships into your board's oversight, my advisory work covers exactly this, or you can get in touch directly.

Common Questions

Who is responsible for conduct when insurance is sold through an e-commerce platform in Singapore?

The insurer and its registered intermediaries. In a February 2026 parliamentary reply, MAS said financial institutions and their intermediaries must uphold proper conduct and consumer safeguards when distributing through platforms, and that general insurance agents must be registered with the GIA's Agents' Registration Board. In practice, the platform's design choices become the insurer's conduct risk.

Does MAS have specific rules for embedded insurance in Singapore?

There is no standalone embedded insurance regime. MAS said in February 2026 that current safeguards are adequate and that it will continue to monitor developments and introduce new safeguards if needed. Embedded arrangements are governed through existing conduct, intermediary registration, outsourcing and technology risk requirements, depending on what the partner actually does.

What should an insurer's board monitor for embedded insurance partnerships?

A register of partnerships and how each is classified; conduct indicators for each major partner, including claims ratios, cancellation rates and complaints received by the partner; concentration against risk appetite limits; tested exit plans; and one accountable senior manager for each material partnership.

Is an embedded insurance partnership an outsourcing arrangement under MAS guidelines?

It can be. If the partner performs services the insurer would otherwise perform itself, such as onboarding, policy servicing or claims notification, those parts may fall within MAS's outsourcing expectations. Boards should check how each arrangement has been classified and who made that decision.

Related insights

About the author

Raymond Cheung is a Chartered Actuary, C-suite executive and board adviser with more than 20 years of experience across Asia in risk management, insurance, ESG and corporate governance. He is the CEO of CER Consultancy and an accredited trainer at SMU Academy and the Singapore College of Insurance.

All insights