Solvency II: The Complete Guide to the EU Prudential Regime

Solvency II is the prudential framework that governs, across the entire European Union, the financial soundness of insurance and reinsurance undertakings. Since it took effect, it has shaped how insurers value their balance sheet, calibrate their own funds, govern their risks and report to supervisors. For a chief executive, an actuary or a risk officer, mastering its architecture is not optional: it is the condition of durable compliance and of informed capital management.

This reference guide sets out the overall picture: the purpose of the regime, its three-pillar structure, its quantitative requirements (SCR, MCR), its governance dimension (including the ORSA), its reporting obligations (SFCR, RSR, QRT), and the changes expected from the ongoing review.

What is Solvency II?

Solvency II refers to Directive 2009/138/EC of the European Parliament and of the Council of 25 November 2009, on the taking-up and pursuit of the business of insurance and reinsurance. The text comprehensively overhauled the European prudential regime, replacing the former Solvency I framework with an approach grounded in the risks each undertaking actually carries.

The central objective is to align the level of own funds required with the insurer's effective risk profile, rather than with flat-rate ratios. The regime aims at once to strengthen policyholder protection, to harmonise rules across the single market, and to encourage undertakings towards finer, more accountable risk management.

Its scope covers life, non-life and reinsurance undertakings established in the Union, with exemption thresholds for the smallest structures. In France, the Autorité de contrôle prudentiel et de résolution (ACPR) supervises the regime, while EIOPA — the European Insurance and Occupational Pensions Authority — works towards convergent supervisory practices across Member States.

Following transposition into French law by the ordinance of 2 April 2015, the regime took effect on 1 January 2016. It rests on an architecture borrowed from the Basel logic used in banking: three complementary pillars.

The three-pillar architecture

Solvency II is organised around three pillars that complement one another: the first sets the how much (quantified capital requirements), the second the how (governance and risk management), the third the accountability (transparency towards supervisors and the public).

Pillar 1 — Quantitative requirements

The first pillar defines the rules for the economic valuation of the balance sheet and the calculation of capital requirements. The starting point is a balance sheet at economic value, where assets and liabilities are measured consistently with the market. On the liability side, technical provisions are estimated as the sum of a best estimate (the discounted best estimate of obligations) and a risk margin.

Two own-funds requirements rest on this basis. The SCR (Solvency Capital Requirement) corresponds to the level of capital that absorbs a one-in-two-hundred-year shock: it is calibrated as a Value at Risk at a 99.5% confidence level over a one-year horizon. In other words, the undertaking must be able to survive an event whose probability of occurrence is once every 200 years. The MCR (Minimum Capital Requirement) is the absolute regulatory floor, calibrated at a lower confidence level — in the order of 85% over one year — and breaching it triggers the strongest supervisory measures.

The SCR itself may be determined along two routes: the standard formula, calibrated by the regulator and applicable by default, or an internal model (full or partial), developed by the undertaking from its own data and subject to supervisory approval. Choosing between these two approaches commits the business over the long term, technically and in governance terms alike.

Pillar 2 — Governance and risk management

The second pillar sets the qualitative requirements. It mandates a system of governance proportionate to the nature and complexity of the business, built around four key functions: risk management, compliance, internal audit and the actuarial function. Each must have the autonomy and the resources its mission requires.

The centrepiece of this pillar is the ORSA (Own Risk and Solvency Assessment). It is not simply one more regulatory calculation, but a forward-looking exercise through which the undertaking assesses its own overall solvency needs, verifies continuous compliance with its capital and provisioning requirements, and measures the gap between its actual risk profile and the assumptions underlying the standard formula. It is the junction between corporate strategy and prudential steering.

Properly conducted, the ORSA becomes a genuine management tool rather than a documentary constraint.

Pillar 3 — Reporting and disclosure

The third pillar organises transparency. It seeks to harmonise, at European level, the information undertakings publish and transmit to their supervisors, combining narrative reports and quantitative data returns.

Two narrative reports structure this dimension: the SFCR (Solvency and Financial Condition Report), intended for the public, and the RSR (Regular Supervisory Report), reserved for supervisory authorities. Alongside these sit the QRT (Quantitative Reporting Templates), quantified returns transmitted to the supervisor, generally in XBRL format, on quarterly and annual cycles.

Producing the QRT concentrates a large share of the operational workload and of the data-quality stakes.

Producing and industrialising compliance

Beyond principles, Solvency II is an execution challenge. Every closing mobilises a complete chain: data collection and validation, economic balance-sheet valuation, SCR and MCR calculation, QRT population, drafting of the narrative reports. A long, recurring chain, heavily dependent on data quality — often the most fragile link in the whole arrangement.

Undertakings still handling this work in artisanal spreadsheet chains expose themselves to error, to tight deadlines and to insufficient traceability under supervisory scrutiny. Conversely, automating prudential calculations, industrialising the audit trail and integrating flows end to end reduces operational risk while freeing up time for analysis. We set out that architecture in our guide to automating Solvency II reporting.

Readers looking specifically at what continuous compliance demands in operational terms may also consult our dedicated article on Solvency II compliance.

The Solvency II review

The framework is not frozen. A wide-ranging review, launched from 2019 and informed by EIOPA's technical advice, has led to an amending directive. The reform adjusts several parameters — notably the treatment of interest rates and of the risk margin, the proportionality principle in favour of smaller undertakings, and greater integration of sustainability and liquidity risk considerations.

On timing, caution is warranted: according to available information, the amending directive was published in the Official Journal of the European Union in early 2025, with application expected around January 2027, subject to implementing measures (delegated acts, technical standards) still being finalised. As these dates may evolve until they actually take effect, we recommend systematically verifying the applicable deadline against EIOPA, ACPR and EUR-Lex sources before any compliance decision.

Summary of the three pillars

Pillar	Nature	Main content	Key deliverables
Pillar 1	Quantitative	Economic balance sheet, technical provisions (best estimate + risk margin), own funds	SCR (VaR 99.5% / 1 year), MCR (~85% / 1 year), standard formula or internal model
Pillar 2	Qualitative	System of governance, key functions, risk management	ORSA (forward-looking internal assessment)
Pillar 3	Reporting	Transparency towards the public and the supervisor	SFCR (public), RSR (supervisor), QRT (quantitative returns)

Securing your Solvency II compliance with Finengy Advisory

From economic balance-sheet valuation to SCR calculation, from building the ORSA to producing the QRT, our actuaries support you across the entire prudential chain — and prepare you for the changes coming out of the ongoing review.

Frequently asked questions

What is the difference between the SCR and the MCR? The SCR is the target capital, calibrated to absorb a one-in-two-hundred-year shock (VaR at 99.5% over one year). The MCR is an absolute floor, calibrated at a lower confidence level (in the order of 85% over one year); breaching it triggers the supervisor's strictest intervention.

Does Solvency II apply to all insurers? The regime covers life, non-life and reinsurance undertakings in the European Union, subject to exemption thresholds for very small entities. The proportionality principle further modulates the intensity of requirements according to the nature and complexity of the business.

What is the ORSA and is it mandatory? The ORSA is the Own Risk and Solvency Assessment required under Pillar 2. It is mandatory and forward-looking: the undertaking assesses its overall solvency needs in the light of its own strategy.

When will the Solvency II review take effect? The amending directive resulting from the review was published in early 2025, with application expected around January 2027, several implementing measures remaining to be finalised. As this timetable may change, it should be verified at source (EIOPA, ACPR, EUR-Lex).

Sources: Directive 2009/138/EC of 25 November 2009 (EUR-Lex); Directive (EU) 2025/2 amending Solvency II; EIOPA publications on the Solvency II review; ACPR materials on the three pillars. Dates and parameters linked to the ongoing review (application expected around January 2027, delegated acts and technical standards) are subject to change and must be verified at source before any compliance decision. Informational content; this does not constitute regulatory advice.