Updated 19 August 2026. OSFI’s covering letter says the draft proposed twelve months, industry asked for three years and “We have revised the implementation date to May 1, 2027.” From 11 September 2025 to 1 May 2027 is 19 months and 20 days. The backgrounder still says “an 18-month transition period.” Encode the letter’s date. Do not call it a transposition window. AMF (Québec) published its Model Risk Management Guideline in June 2025. That English PDF states no commencement date. Issuance is not the date it bound Quebec insurers.
OSFI published Guideline E-23 on Model Risk Management on 11 September 2025. It takes effect on 1 May 2027. The title on OSFI’s page is Guideline E-23 - Model Risk Management. “Revised” is a gloss, not the instrument name. The final text pulls advanced machine learning, large language models and agentic workflows into a single enterprise governance regime for all Federally Regulated Financial Institutions, including life and P&C insurers, foreign bank branches and foreign insurance branches per Guideline E-4. Footnote 1 adopts the OECD definition of an AI system. Read the guideline, not the letter: the letter says “validation” where the guideline at §D.2 and §A.4 says “review”. Foreign insurance branches appear in §A.2 even though some OSFI metadata omits them.
What changes for insurers
Three practical shifts:
- Inventory breadth - generative assistants and vendor models join actuarial and credit-style models under a technology-neutral definition of a model
- Lifecycle evidence - data lineage, explainability, opacity management and drift monitoring must be reconstructible
- Board visibility - material AI outcomes become risk-committee language, not IT experiments
Track FIFAI II (OSFI / FCAC, March 2026) for retail consumer boundaries. AMF (Québec) Model Risk Management for provincial parallel scope. AMF (Québec) Guideline for the Use of Artificial Intelligence §6.1 for the AIS inventory (instrument word: inventory; fields in Appendix 2). OSFI Guideline B-10 for FRFI fourth-party and feeder models, in force 1 May 2024. AMF (Québec) Third-Party Risk Management from 1 April 2027 for Quebec-authorized institutions. Until that date, MRM footnote 12 still points at the April 2009 Outsourcing Guideline. Do not put 1 April 2027 on E-23 or on the AMF (Québec) AI Guideline. Both of those commence on 1 May 2027.
Claims and pricing as the proving ground
The systems that decide premiums and claim outcomes are where supervisors will look first. Fairness, explainability and override behaviour are not optional narratives. They are operating records.
How we encode Canada
The Canada pack remains Scoped in our roadmap. Seed instruments now include Guideline E-23 (2017 and 2027), FIFAI II, AMF (Québec) MRM, the AMF (Québec) AI guideline, AMF (Québec) Outsourcing and TPRM, B-13 and B-10. See the Canada Jurisdiction Pack.
Insurers that wait for a perfect inventory before observing production traffic will spend the transition rebuilding last quarter’s decisions from email.