LLM Assurance

Testing and evaluation for AI in mortgage and insurance.

LLM Assurance tests guardrails, retrieval context and response behavior before release, on every change and in production — for lenders, servicers and insurers, and for models you build or buy.

◆Thresholds agreed before the run ◆Every model or prompt change re-tested ◆Verdicts traced to your specification

The problem

AI behavior can change without a code change.

A language model is not a release you control line by line. Its behavior moves when the model is upgraded, when a prompt is edited, when a policy document is replaced — and it moves silently.

Behavior drifts without a deploy

A vendor model update or a refreshed knowledge source can change what your assistant tells a borrower or a policyholder, with no code change to review and no test that would have caught it.

"It looked fine in the demo" is not evidence

Spot-checking a handful of conversations tells you how the system behaved once. It tells your risk function nothing about how it will behave next week.

The obligations are already live

In mortgage, Freddie Mac Bulletin 2025-16 and Fannie Mae Lender Letter LL-2026-04 require oversight of AI wherever it appears. In insurance, the NAIC AI Model Bulletin, adopted by many states, expects insurers to govern AI systems, including those from vendors.

What we test

Six areas of evaluation.

Every scenario traces back to the clause of your specification it tests, so a failure is a finding against a requirement — not an opinion about a transcript.

Guardrails

Permitted topics

It stays inside the topics it is allowed to discuss, and stays out of advice it must not give — rate quotes, eligibility or coverage promises, legal or tax guidance.

Guardrails

Refusal and handoff

It declines what it must decline, and hands off to a person where it is supposed to — complaints, hardship, disputed claims — every time, not most of the time.

Security

Prompt injection and data leakage

Adversarial inputs that try to override its instructions, and requests that try to extract another borrower's data or the system's own configuration.

Context

Retrieval relevance

The right passages from the right, current source are retrieved for the question asked — not a superseded guide or a neighbouring product's policy.

Context

Grounded responses

Answers are supported by the retrieved context, and say so when the context does not contain the answer instead of filling the gap.

Completeness

Required facts and language

It never quietly drops a fact the response is required to carry — the disclosure, the deadline, the condition that changes the customer's next step.

How it works

A non-deterministic system needs a deterministic harness.

The system under test is non-deterministic — which is precisely why the harness must not be. Scenarios, thresholds and verdicts are versioned, so any run can be reproduced and compared.

  1. Specify

    Your business authors what the AI must and must not do — topics, refusals, handoffs, required facts.

  2. Build the suite

    The specification becomes reviewed scenarios and agreed thresholds, each traced to the clause it tests.

  3. Run on every change

    A model, prompt, knowledge or rule change triggers a full re-run and a diff against the baseline.

  4. Learn from production

    Agreed signals are monitored; reviewed findings become new regression scenarios.

DepthYour specification stays the system of record — every verdict traces back to a clause in it
Thresholds are agreed before the run, not argued after it.

Three moments that matter

Before release. On every change. In production.

Before release

A baseline you can sign

The full suite runs against the release candidate. Results are reviewed against the thresholds your business agreed, and the baseline is recorded — what "good" looked like on the day it shipped.

On every change

Versioned regression

A model version, prompt, knowledge source or rule change triggers a re-run with a diff against the baseline — so you see what moved, and decide, before your borrowers do.

In production

Production validation

Agreed quality and safety signals are monitored, alerts are investigated, and reviewed findings are fed back into the suite — so it gets stronger every time something surprises you.

When the knowledge changes, the evaluation follows. Policy documents and content sources are versioned, the scenarios they affect are identified, and those evaluations are re-run when the content changes — not at the next quarterly review.

What you get

Evidence for your risk and compliance functions.

For each release and each change

  • Scenario results against agreed thresholds
  • A diff against the previous baseline
  • Reviewed failures, with the clause each one breaks
  • The model, prompt and knowledge versions that were tested

For your governance record

  • An entry in your AI system inventory
  • Monitoring and change history over time
  • Evidence shaped for MISMO FRAME, the GSE AI requirements and the NAIC AI Model Bulletin
  • Human review calibrating any automated evaluator
LLM Assurance feeds straight into Governance Readiness — the same evidence answers a FRAME risk assessment, a GSE AI review or an insurance regulator's AI inquiry.

Straight answers

What assurance is — and what it is not.

It runs inside your environment

Test scenarios, customer-like data and results stay inside your boundary. Where an automated evaluator is used, it can run against a private or self-hosted model, and it is calibrated against human review before anyone relies on it.

It makes behavior measurable, not perfect

Repeatable tests do not make a language model deterministic, and no test suite guarantees full accuracy. What assurance gives you is a measured, versioned picture of behavior — and a defensible answer when someone asks how you know.

Building the AI as well as testing it? Our On-Prem Customized LLM for Mortgage ships with LLM Assurance built in. Testing the application around the AI? See AI-Powered Test Automation.

Questions buyers ask

Common questions.

What is LLM Assurance?

Testing and evaluation for the language models in mortgage and insurance products. It tests guardrails, retrieval context and response behavior before release, on every model, prompt or knowledge change, and in production — for AI you build or buy.

What does LLM Assurance test?

Permitted topics, refusal and handoff behavior, prompt injection and data leakage, retrieval relevance, grounded responses, and whether required facts and disclosure language are present.

How is a non-deterministic model tested reliably?

The test harness is deterministic even though the model is not. Scenarios, thresholds and verdicts are versioned and agreed before the run, every verdict traces to a clause in your specification, and any automated evaluator is calibrated against human review.

Can LLM Assurance test AI we bought from a vendor?

Yes. The GSE requirements in mortgage and the NAIC AI Model Bulletin in insurance both expect oversight of vendor AI, and LLM Assurance can evaluate AI systems you bought as well as those you built.

Does testing guarantee an LLM is accurate?

No. Repeatable tests do not make a language model deterministic or guarantee full accuracy. Assurance gives a measured, versioned picture of behavior and a defensible record of how it was tested.

Where to start

Start with one AI use case.

One assistant, one workflow or one model change you are worried about. We will scope the specification, the scenarios and the thresholds with you, and show you the first results against your own system.

Discuss LLM Assurance

Need the fix built too? Add Reslt AI product engineering →