On 20 October 2025, an outage in Amazon Web Services’ largest cloud region took down a long list of businesses that had nothing wrong with their own systems. Parametrix later estimated the financial damage to US companies at $500m to $650m. CyberCube reckoned close to 70,000 organisations were affected worldwide. Guy Carpenter put the insured loss somewhere between $300m and $1bn, which tells you how uncertain everyone still was weeks afterwards.
The detail worth pausing on is not the size of the loss. It is that Parametrix had already paid claims while the rest of the market was still working out what the number was. There was no adjuster, no proof-of-loss submission and no argument about causation. A monitored service was down for longer than the agreed threshold, so the policy paid.
That is parametric insurance, and until recently it mostly meant hurricanes, earthquakes and rainfall. It has now escaped catastrophe, and the reason is more technical than actuarial.
What actually changed
A parametric product needs one thing above all: a measurement that both sides trust, available fast enough to be worth paying on. For decades that limited the category to things national agencies already measured, which meant weather and seismology.
Two developments moved the boundary. Sensors got cheap and dense enough to measure conditions at a specific building rather than across a region. And digital infrastructure became continuously observable by third parties, so the uptime of a cloud region or a SaaS platform is now a matter of public record rather than a vendor’s word.
Once you can measure something independently, in near real time, at the resolution of a single insured, you can write a trigger on it. The underwriting question changes from “what will this loss cost” to “what can we measure, and how closely does it track what the client actually loses”.
The cloud outage product
On 13 August 2026, AIG launched a parametric cloud outage solution built with Parametrix, available in the US as an endorsement for eligible cyber clients. The structure is worth reading closely, because it is a good example of the design pattern:
- The trigger is a formula, not a claim. Payout is calculated from measured downtime and its financial impact against predefined policy triggers.
- A two-hour waiting period, then no monetary retention. Short outages are excluded by time rather than by deductible, which suits a risk where the distinction that matters is duration, not severity.
- The index is somebody’s full-time job. Parametrix monitors more than 750 data centres and tracks over 9,000 software and technology providers across SaaS, PaaS and IaaS. The monitoring is the product as much as the wording is.
- It ships as an endorsement. Rather than launching a standalone policy and building distribution for it, AIG attached it to cover its clients already buy.
The demand is not hypothetical. Enterprise spending on cloud infrastructure services reached $129bn in the first quarter of 2026 alone, up 35% year over year. Concentration has followed: when a handful of regions underpin a large share of commerce, a single outage becomes a correlated event across thousands of unrelated businesses. The CrowdStrike failure of 19 July 2024 made the point earlier, taking out roughly 8.5 million Windows devices, with Parametrix estimating $5.4bn of direct losses among Fortune 500 companies alone.
A sensor in the building beats a model of the region
The second development shows up in a story from Peru. A magnitude 5.8 earthquake hit Ica on 19 May 2026. The commercial client held a ShakeNet Parametric policy from Liberty Mutual Reinsurance and Safehub, bought the previous October through Price Forbes Latam. The claim was paid 21 days after the event.
Two things about that deserve attention.
First, the trigger came from Safehub’s own sensor network combined with government seismic data, producing highly localised shaking maps. Traditional earthquake parametric pays on magnitude and distance from an epicentre, which is a proxy for what a specific building actually experienced. Measuring the shaking at the site removes a layer of guesswork. That is the single most important idea in modern parametric design: the closer the measurement gets to the insured, the smaller the gap between what the policy pays and what the client lost.
Second, the client bought it as a complement to a traditional indemnity placement, not a replacement. The parametric layer existed to provide immediate liquidity while the indemnity claim went through its normal process. That is the honest positioning for most of this category, and it is a better sales argument than pretending parametric replaces anything.
Where else the triggers are going
- AI performance. Munich Re’s aiSure prices premium off a model’s measured robustness and settles on performance data rather than loss adjustment, and Armilla’s AI liability policy responds when a model degrades from its underwritten baseline. This is parametric thinking applied to a risk with no physical event at all, and it is covered in more depth in our piece on AI agent insurance products.
- Travel disruption. Flight delay cover triggered on live flight data, with Blink Parametric powering products for Zurich and Klook, and for MAWDY in the MAPFRE group. Payment or lounge access arrives before the passenger has landed.
- Renewable energy. Output shortfall cover indexed to wind speed or solar irradiance, protecting revenue when the resource underperforms rather than when equipment breaks.
- Supply chain. Triggers built on shipping indices or named port closures, paying on the disruption itself instead of tracing consequential loss through a contract chain.
The common thread is that all of these are risks where the loss is real and the paperwork is disproportionate. Parametric works best where proving a loss costs more, relative to the loss, than measuring a proxy for it.
Why it is harder than it looks
Three problems keep this from being the easy win it sounds like.
Basis risk never goes away. The index can move without the client losing money, or the client can lose money without the index moving. Every design decision in a parametric product is really a decision about which direction you would rather be wrong in. Denser data narrows the gap, as the Safehub example shows, but nothing closes it. A client who receives nothing after a bad day will not be comforted by an explanation of the trigger, so this belongs in the sales conversation rather than in the small print.
There is a regulatory fork, and it matters. A pure parametric cover that pays a set amount on a defined event regardless of any economic loss is frequently executed as a derivative. A hybrid cover, where the trigger fires and the client demonstrates an actual loss, is structured as an insurance contract. Which side of that line you land on determines your regulator, your capital treatment and often whether your capacity partner can write it at all. This is a decision to make before drafting the wording, not after.
Catastrophe still dominates. Natural catastrophe covers account for roughly 70% of parametric premium in 2026, with agriculture a large share of the remainder. Cloud outage and AI performance are the interesting frontier, not the market. Anyone writing a business case should model this as a growing niche rather than a category takeover.
One further caution: published market-size estimates for parametric vary by roughly a factor of six between reputable-looking sources for the same year. Treat any single figure you are quoted with suspicion, including one in your own board pack.
What it takes to build one
Parametric products break traditional core systems in a specific way. The claim does not begin with a person; it begins with a data feed. That single difference cascades.
- The claim has to open itself. A monitoring webhook arrives, gets evaluated against the policy threshold, and opens a claim with reserves and an approval route. The workflow engine and claims module handle this as one path, with a human approval step wherever you want the payment gated.
- Rating factors are unusual and unstable. Downtime hours, sensor coverage, provider concentration, model accuracy. You will get the first version wrong, so the rating engine needs editable tables with effective dating rather than a filing cycle, and the Product Builder needs to let a business user reshape the trigger as evidence arrives.
- You are integrating somebody else’s measurement. The index comes from a monitoring provider or a sensor network, which makes this an integration problem before it is an underwriting one. The quality of that feed is the quality of your product.
- Distribution is usually an attachment. AIG shipped its product as an endorsement to existing cyber cover. The same logic applies to embedding a trigger-based add-on in a partner journey, where the buyer is already thinking about the risk.
- Every payment needs a defensible record. When a trigger fires and money moves without an adjuster, the audit trail is your only evidence of why. Regulators and capacity partners will both ask.
None of that is exotic technology. It is ordinary event-driven software applied to insurance, and it is difficult mainly for platforms that assume a claim starts with a phone call.
Closing thoughts
The interesting shift is not that parametric grew. It is that the constraint moved. For thirty years the category was limited by what public agencies happened to measure. Now it is limited by what anyone can measure well enough to be trusted, which is a much larger and faster-growing set, and it expands every time somebody installs a sensor network or starts monitoring a category of infrastructure.
That makes this a product-design problem more than an underwriting one. The teams that do well will be the ones who can wire up a new data source, write a trigger against it, test it, and change it three months later when the first real event shows them what they got wrong.
If you are working on a trigger-based product and want to see what that looks like configured rather than coded, book a demo and bring the data feed you are planning to use. Openkoda runs products, rating and claims workflows as configuration you own, on published flat pricing.