What IVASS Regulation 40/2018 asks of brokers, agents and the people who work with them. Each duty comes with its article, so you can check the source.
The rules apply to anyone who sells insurance and is on the RUI. That is the register of intermediaries kept by IVASS, the Italian supervisor. Agents sit in section A and brokers in section B. The people who work with them sit in section E.
The main text is IVASS Regulation 40/2018. It puts the EU Insurance Distribution Directive (IDD) into Italian practice.
If your office still uses forms from before 2024, check them one by one.
Ten duties that come up in daily work. Under each one is the rule it comes from.
You can only sell insurance if you are on the RUI. The same goes for the people who work with you. Anyone in section E must be listed, and their entry must stay up to date.
IVASS Reg. 40/2018 · art. 33 for section E
Before the client signs the proposal, you hand over the single pre-contract form. It is Annex 3 of the rules, or Annex 4 for insurance-based investments. Since 2026 it also covers the right to be forgotten for cancer survivors.
Art. 56 · Annexes 3 and 4 · Measures 147/2024, 163/2025, 169/2026
Before you make an offer, you ask the client about their situation and what they need. The policy you offer must fit their answers. If the client will not answer, you need a signed statement.
Art. 58 IVASS Reg. 40/2018
The client chooses how to get documents: on paper or on another durable medium. The rules ask you to favour e-signatures. Keep a record of what the client signed and when.
Arts. 61 and 62 IVASS Reg. 40/2018
Each person in section E works with you under a written agreement. Keep those agreements and their RUI details with the rest of your files.
Art. 33 · art. 67(a) and (g)
You need 60 hours of training in the 12 months before you register or start work. After that, you need 30 hours of refresher training each year. Art. 89 cuts this to 15 hours for some roles.
Arts. 88 and 89 IVASS Reg. 40/2018
Keep mandates, proposals, signed papers, needs forms and training records. Keep them for at least five years, unless another law sets a different term. A digital archive is fine if it follows the Italian digital code (CAD).
Art. 67 IVASS Reg. 40/2018
Complaints follow ISVAP Regulation 24/2008. The website you sell from must show who you are and your RUI number. It must also say where to send complaints and link to the Insurance Arbitrator.
ISVAP Reg. 24/2008 · art. 79 IVASS Reg. 40/2018
If you rely on consent, you must be able to prove the client gave it. And if someone talks to an AI system, they must be told it is not a person.
GDPR arts. 5 and 7 · EU AI Act art. 50
If you sell online or by phone, the Consumer Code rules on financial services at a distance also apply. The client can withdraw within 14 days, or 30 for life cover. If they bought online, they must be able to withdraw online just as easily.
Consumer Code arts. 59-bis ff. and 59-octies · Leg. Decree 209/2025 · IVASS Reg. 40/2018
Each no points to a gap you need to close.
For each duty, the platform feature that supports it. It is all included in the Partner Network; on White Label plans it is part of the Compliance Module.
| Duty | What Aron does |
|---|---|
| RUI registration | A RUI date for every collaborator, a weekly check against the public register and a quote block for firms with no RUI entry. |
| MUP | Made for every quote and policy, in the seller's name. A panel shows the sections you still need to fill in. |
| Demands and needs | Collected in the quote form. Before issue, the user checks the offer against them, and the check is logged. |
| Signature | The client signs the quote with a one-time code before issue and renewal. Each firm can switch it on. |
| Section E staff | The mandate is drawn up and signed with a one-time code. Required papers come before go-live. An expired mandate blocks quotes and renewals. |
| Record keeping | Files stored with each case, plus a log of accepted documents with each version and fingerprint. |
| Complaints | A complaints log under ISVAP Regulation 24/2008. |
| Website details | White-label funnels show the intermediary's details, RUI number, complaints contacts and a link to the Insurance Arbitrator. |
| Distance sales | Withdrawal handling, reminders to the client, an online withdrawal request and a compliance page of its own. |
| Privacy and AI | A cookie consent banner on the funnel. The AronAI copilot tells users they are talking to an AI. |
| Whistleblowing | A reporting channel for each firm, with its own public page (Legislative Decree 24/2023). |
Aron provides tools that support your duties. Responsibility for compliance stays with the intermediary.
This guide sums up the rules. It is not legal advice.
60 hours of training in the 12 months before you register or start work (art. 88). Then 30 hours of refresher training a year (art. 89). Some roles can do 15 hours a year instead.
At least five years, unless another law sets a different term. This comes from art. 67 of IVASS Regulation 40/2018. The archive can be digital if it follows the CAD.
It is the single pre-contract form. IVASS Measure 147/2024 brought it in, in place of the old Annexes 3, 4, 4-bis and 4-ter. You give it to the client before they sign the proposal.
14 days, or 30 for life insurance. This comes from art. 59-octies of the Italian Consumer Code, added by Legislative Decree 209/2025 and applied from 19 June 2026. Travel and baggage policies of less than a month are among the exceptions.
Usually not. A code sent by text or email is a simple e-signature. How much it proves also depends on the log behind it: who signed, what and when. The rules for an advanced signature are in an Italian decree of 22 February 2013.
Not as far as we know. IVASS supervises insurers and intermediaries, not software. Software can help with the work, but the duty stays with you.
No. It can enforce steps, such as a signature before issue, and keep the proof. Judging compliance is up to the intermediary and their advisers.
How signatures, mandates and renewals work on Aron.
In 30 minutes we show you a quote, a one-time code signature, the MUP and the complaints log on the platform.