Governance & Security

Full Process Control with Built-In Governance

Tabular by Solvency II Solutions is built from the ground up with governance, transparency, and internal control in mind. Every step of the Solvency II and Solvency UK reporting process—data ingestion, transformation, validation, and output—is logged, versioned, and fully auditable. This enables insurers to meet both internal governance requirements and external regulatory expectations without relying on fragmented tools, undocumented processes, or manual workarounds.

Tabular maintains a full audit log of all activity, including data imports, validation runs, report generations, user actions, and configuration changes. Each log entry includes timestamps, user identification, and system context, allowing compliance and audit teams to trace any result back to its source with confidence.

All reports and output files are version-controlled, ensuring that historical submissions can be retrieved, reviewed, and compared at any point. Any re-submissions or restatements are logged separately and tagged to preserve the integrity of the regulatory timeline.

Tabular also enforces clear separation of duties between roles such as preparer, reviewer, and approver. Access can be controlled on a user-by-user basis, with permissions defined for each area of the workflow. This helps prevent unauthorised changes, ensures sign-off integrity, and supports well-documented handover between actuarial, finance, and compliance teams.

All validations—including regulatory taxonomy rules and custom business rules—are embedded into the governance process. Failed validations trigger alerts and must be resolved or overridden with commentary. Overrides are logged and traceable, supporting internal review and regulatory audit.

Finally, Tabular supports controlled environments for testing and production. This allows for parallel running, impact analysis, and safe implementation of updates without interfering with live submissions.

Security by Design, ISO 27001 Certified

Tabular is a 100% on-premises solution, meaning no data is transferred to the cloud and no third-party infrastructure is involved. Sensitive regulatory and actuarial data remains fully under your control at all times, behind your own firewall and within your own governance framework.

Solvency II Solutions Ltd is ISO 27001 certified, which means our information security management system has been independently verified against international best practice standards. Our software development, release processes, and support practices are all covered under this certification.

All data within Tabular is stored using encrypted formats, and access is managed through role-based permissions. Configuration files, audit logs, and output artefacts are digitally signed and tamper-resistant. Updates to the system—including regulatory patches and taxonomies—are also verified and logged, ensuring a secure and controlled lifecycle from installation through to submission.

Tabular does not require open ports, exposed services, or persistent external connectivity. The system operates entirely within your network, removing many of the attack surfaces typically associated with cloud-based or hybrid applications.

Summary: Governance & Security Features

FeatureIncluded in TabularDescription
Full Audit LoggingYesTimestamps, users, actions, data versions
Role-Based Access ControlYesEnforces separation of duties
Version Control of ReportsYesRe-runs and restatements tracked separately
Validation Override ControlsYesOverrides logged with explanation
Environment SeparationYesTest/live separation for safe change management
Encryption of Data at RestYesAll data securely stored
No Cloud / External Data TransferYesOn-premises by design
ISO 27001 CertificationYesIndependent security assurance
Secure Patch ManagementYesVerified updates with full audit trail
User Permission ManagementYesGranular control across teams

Conclusion

Tabular provides insurers with complete control and visibility over their regulatory reporting process—while enforcing best-practice governance and data protection standards. With ISO 27001 certification and an on-premises architecture, it ensures that sensitive Solvency II and Solvency UK data stays secure, auditable, and under your control at all times.