Solvency II Compliance: The Complete Guide to the EU Prudential Framework

Solvency II is the risk-based prudential regime that governs, across the entire European Union, the financial soundness of insurance and reinsurance undertakings. Since it took effect, it has shaped how insurers value their balance sheet, calibrate their own funds, govern their risks and report to their supervisors. For a director, an actuary or a risk officer, mastering its architecture is not optional: it is the precondition for durable compliance and for informed capital management.

This reference guide sets out the whole framework in English: what Solvency II is, how it is organised into three pillars, its quantitative capital requirements (SCR, MCR), its governance dimension (including the ORSA), its reporting obligations (SFCR, RSR, QRT), who supervises it, to whom it applies, and the changes expected from the ongoing review. Each building block links to a dedicated article for those who want to go deeper.

En français — cet article a un pendant français, plus détaillé sur la transposition et la doctrine ACPR : consultez notre guide complet de Solvabilité II.

What is Solvency II?

Solvency II refers to Directive 2009/138/EC of the European Parliament and of the Council of 25 November 2009, on the taking-up and pursuit of the business of insurance and reinsurance. This text thoroughly reshaped the European prudential regime, replacing the earlier Solvency I framework with an approach grounded in the risks each undertaking actually bears.

The central objective is to tie the level of required own funds to an insurer's effective risk profile, rather than to flat-rate ratios. The aim is threefold: to strengthen policyholder protection, to harmonise the rules within the single market, and to encourage undertakings towards finer, more responsible risk management.

The scope covers life, non-life and reinsurance undertakings established in the Union. Solvency II applies to insurers, reinsurers and mutuals alike, subject to exemption thresholds for the smallest structures and moderated by a proportionality principle that scales the intensity of the requirements to the nature, scale and complexity of the activity. Supervision is shared: EIOPA (the European Insurance and Occupational Pensions Authority) drives convergence of practices between Member States, while national supervisors enforce the regime locally — in France, the Autorité de contrôle prudentiel et de résolution (ACPR).

Following transposition into national law, the regime entered into application on 1 January 2016. It rests on an architecture borrowed from the Basel banking logic: three complementary pillars.

The three-pillar architecture

Solvency II is built around three pillars that reinforce one another: the first sets the how much (the quantified capital requirements), the second the how (governance and risk management), and the third the accounting-for (transparency towards the supervisor and the public).

Pillar 1 — Quantitative requirements

The first pillar defines the economic valuation rules for the balance sheet and the calculation of capital requirements. Its starting point is an economic balance sheet, where assets and liabilities are valued on a market-consistent basis. On the liability side, technical provisions are estimated as the sum of a best estimate (the probability-weighted, discounted present value of the obligations) and a risk margin.

Two own-funds requirements sit on this foundation. The SCR (Solvency Capital Requirement) is the level of capital needed to absorb a one-in-two-hundred-year shock: it is calibrated as a Value-at-Risk at a 99.5% confidence level over a one-year horizon. In other words, the undertaking must be able to survive an event whose probability of occurrence is once every 200 years. The MCR (Minimum Capital Requirement) is the absolute regulatory floor, calibrated at a lower confidence level — of the order of 85% over one year — and breaching it triggers the strongest supervisory measures. We detail both thresholds, their roles and the consequences of a shortfall in our article on the SCR and MCR under Solvency II.

The SCR itself can be determined by two routes: the standard formula, calibrated by the regulator and applicable by default, or an internal model (full or partial), developed by the undertaking from its own data and subject to supervisory approval. The choice between these two approaches commits the firm durably, technically and in governance terms.

Pillar 2 — Governance and risk management

The second pillar sets the qualitative requirements. It mandates a system of governance proportionate to the nature and complexity of the business, articulated around four key functions: risk management, compliance, internal audit and the actuarial function. Each must have the autonomy and resources needed to carry out its mission.

The centrepiece of this pillar is the ORSA (Own Risk and Solvency Assessment). It is not merely one more regulatory calculation, but a forward-looking exercise through which the undertaking itself assesses its overall solvency needs, verifies continuous compliance with its capital and provisioning requirements, and measures the deviation between its actual risk profile and the assumptions underlying the standard formula. It is the junction point between corporate strategy and prudential steering. We describe its components, frequency and good practices in our article on the ORSA under Solvency II.

Pillar 3 — Reporting and disclosure

The third pillar organises transparency. It harmonises, at European scale, the information undertakings disclose to the public and transmit to their supervisors. It combines narrative reports with quantitative data returns.

Two narrative reports structure this dimension: the SFCR (Solvency and Financial Condition Report), intended for the public, and the RSR (Regular Supervisory Report), reserved for supervisory authorities. Alongside these narratives are the QRT (Quantitative Reporting Templates), the quantified data returns transmitted to the supervisor — generally in XBRL format, on quarterly and annual cycles. Producing the QRTs concentrates much of the operational load and the data-quality stakes; we cover their content, calendar and common pitfalls in our article on the QRTs and Solvency II reporting requirements.

What Solvency II compliance actually means

"Solvency II compliance" is often reduced to a single figure — the solvency ratio. In practice it means demonstrating, continuously and not just at a reporting date, that the undertaking's eligible own funds cover the SCR, whether the SCR is computed under the EIOPA standard formula or under an approved internal model. Coverage of the MCR is the harder floor: falling below it exposes the undertaking to the most immediate supervisory intervention.

But compliance does not stop at a ratio above 100%. It is a chain that must hold end to end: a market-consistent economic balance sheet, technical provisions built on a defensible best estimate and risk margin, a governance system with four functioning key functions, a genuine ORSA owned by the board, and complete, timely, auditable Pillar 3 returns. A firm can be well-capitalised and still non-compliant if its data quality is weak, its governance thin, or its reporting late. Supervisors assess the whole framework, not just the headline number.

Who supervises, and to whom it applies

Supervision operates on two levels. EIOPA issues guidelines, technical standards and stress-test exercises, and works to align supervisory practice across the Union; the national supervisors — the ACPR in France, BaFin in Germany, and their counterparts elsewhere — grant approvals (including internal models), receive the returns and conduct on-site inspections.

The regime applies to EU insurers, reinsurers and mutuals. Undertakings below the exemption thresholds set in the directive may fall outside the full regime, and proportionality tempers the requirements for smaller or less complex firms — but neither dispenses a supervised undertaking from demonstrating sound risk management. Non-EU groups operating in the Union are drawn in through equivalence and group-supervision mechanisms.

Industrialising compliance

Beyond the principles, Solvency II is an execution challenge. Each closing mobilises a full chain: gathering and cleansing data, valuing the economic balance sheet, calculating the SCR and MCR, populating the QRTs, drafting the narrative reports. It is a long, recurring chain, heavily dependent on data quality — often the most fragile link in the system.

Undertakings that still handle these tasks in artisanal spreadsheet chains expose themselves to error, tight deadlines and insufficient traceability in the event of an inspection. Conversely, automating the prudential calculations, industrialising the audit trail and integrating flows end to end reduces operational risk while freeing up time for analysis. In practice this means governed data pipelines (from a consolidated source such as SAP S/4HANA or a dedicated data warehouse), automated QRT generation with validation controls, and analytical reporting layers (for example Power BI) that turn regulatory outputs into steering dashboards for the board and the key functions. This is precisely where Finengy Advisory positions its work.

The Solvency II review

The framework is not static. A wide-ranging review, launched from 2019 and informed by EIOPA's technical advice, led to an amending directive. This reform adjusts several parameters — notably the treatment of interest rates and the risk margin, the proportionality principle in favour of smaller undertakings, and a greater integration of sustainability and liquidity-risk considerations.

On the timeline, caution is warranted: according to available information, the amending text — Directive (EU) 2025/2 — was published in early 2025, with application expected around January 2027, subject to the implementing measures (delegated acts, technical standards) still being finalised. Because these dates may evolve until they actually enter into force, we recommend systematically verifying the applicable deadline at source (EIOPA, EUR-Lex, and the national supervisor) before any compliance decision.

Summary table of the three pillars

Pillar	Nature	Main content	Key deliverables
Pillar 1	Quantitative	Economic balance sheet, technical provisions (best estimate + risk margin), own funds	SCR (VaR 99.5% / 1 year), MCR (~85% / 1 year), standard formula or internal model
Pillar 2	Qualitative	System of governance, four key functions, risk management	ORSA (internal forward-looking assessment)
Pillar 3	Reporting	Transparency towards the public and the supervisor	SFCR (public), RSR (supervisor), QRT (data returns)

Secure your Solvency II compliance with Finengy Advisory From economic balance-sheet valuation to SCR calculation, from building the ORSA to producing the QRTs, our actuaries support you across the entire prudential chain — and prepare you for the changes brought by the ongoing review. Discover our prudential and actuarial consulting offering.

FAQ

What does Solvency II compliance mean in practice? It means demonstrating continuously — not only at a reporting date — that eligible own funds cover the Solvency Capital Requirement (SCR), computed under the standard formula or an approved internal model, while never breaching the Minimum Capital Requirement (MCR). It also requires a sound governance system, a genuine ORSA and complete, timely Pillar 3 reporting.

What is the difference between the SCR and the MCR? The SCR is the target capital, calibrated to absorb a one-in-two-hundred-year shock (VaR at 99.5% over one year). The MCR is an absolute floor, calibrated at a lower confidence level (of the order of 85% over one year); breaching it triggers the supervisor's strictest intervention. Both requirements are detailed in our SCR and MCR article.

Does Solvency II apply to every insurer in the EU? It covers life, non-life and reinsurance undertakings in the European Union, subject to exemption thresholds for very small structures. The proportionality principle further scales the intensity of the requirements to the nature and complexity of the activity.

Who supervises Solvency II? EIOPA drives convergence and issues guidelines and technical standards; national supervisors (the ACPR in France, and its counterparts elsewhere) grant approvals, receive the returns and conduct inspections.

When will the Solvency II review enter into application? The amending directive (Directive (EU) 2025/2) was published in early 2025, with application expected around January 2027, several implementing measures still to be finalised. As this timetable may change, verify it at source (EIOPA, EUR-Lex) before any compliance decision.

Sources: Directive 2009/138/EC of 25 November 2009 (EUR-Lex); Directive (EU) 2025/2 amending Solvency II; EIOPA publications on the Solvency II review; ACPR materials on the three pillars (quantitative requirements, ORSA, disclosure). Dates and parameters relating to the ongoing review (application expected around January 2027, delegated acts and technical standards) are subject to change and must be verified at source (EIOPA, EUR-Lex) before any compliance decision.