How Retailers Can Sell Regulated Insurance as an FCA Appointed Representative

That’s not a compliance detail sitting underneath the real decision. It is the decision. Two routes let a UK retailer distribute insurance without applying for FCA authorisation of its own, and they are not two doors to the same room. One boxes in what can be covered, how much can be charged for it, and how closely it has to relate to the goods already in the basket. The other doesn’t. Retailers who treat “sorted the FCA question” as a single checkbox only discover which room they’re in once the product they’ve already built doesn’t fit it. An FCA Appointed Representative (AR) is a firm that distributes regulated insurance under the responsibility of an FCA-authorised principal, without holding permissions of its own – and unlike the alternative, the Connected Contract Exemption, it carries no premium ceiling and no requirement to tie the cover to the item being sold.

Ask a retailer whether they need FCA authorisation to sell embedded insurance, and there’s a real, well-established answer: not necessarily. Two mechanisms get them there – the Connected Contract Exemption (CCE) and the Appointed Representative (AR) route – and both are legitimate, commonly used, and genuinely remove the authorisation barrier.

That’s also exactly why they get conflated. From a checklist perspective, “do I need my own FCA permissions?” resolves to “no” either way, so the question stops there. It shouldn’t. The CCE and the AR route answer a different, harder question – what can I actually sell, and to whom – in two different ways, and the gap between those answers is where retailers get caught out.

The Connected Contract Exemption sits at Article 72B of the Financial Services and Markets Act 2000 (Regulated Activities) Order 2001. The AR regime sits at SUP 12 of the FCA Handbook. Same starting point – no direct authorisation required — genuinely different products available at the end of it.

The conflation is understandable. Both routes are usually introduced to a retailer in the same conversation, often by the same adviser, as two flavours of “you won’t need to become an insurer.” Both remove the same first-line barrier – the fear that selling insurance means applying for authorisation, building a compliance function, and delaying launch by a year.

Once that fear is removed, the harder question – which route, and what does it commit me to – often doesn’t get asked at all. The product spec gets built next, priced against whatever margin the retailer already had in mind, and the regulatory route gets confirmed afterwards, treated as a formality rather than a design constraint.

It rarely is a formality. The CCE and the AR route impose genuinely different limits on the product itself, not just on the paperwork behind it. Sequencing the decision after the product is designed doesn’t remove that difference – it just moves the moment retailers discover it from the planning stage to the pricing stage, which is a considerably more expensive place to find out.

The CCE’s conditions are specific: the insurance must be non-life, complementary to and closely connected with the goods or services the retailer already supplies, and the annual premium must not exceed €600 (pro rata) – or €200 where it’s complementary to a service of three months or less. A tool retailer selling £40 accidental damage cover on a £400 drill sits comfortably inside all of that.

A jewellery retailer building an annual protection product across a customer’s whole collection doesn’t. Neither does a platform whose customers would sensibly buy multi-year cover rather than a one-off add-on, or a retailer whose average basket value pushes premiums past the ceiling on higher-ticket lines. None of that is visible while the product is still a spreadsheet. It becomes visible when someone tries to price a cover level the CCE was never built to hold, and by then the launch timeline, the insurer conversations, and often the marketing have already been built around a product that has to be redesigned. This is the cost of resolving the regulatory question as a yes/no early and never revisiting it: not a compliance breach, but a rebuild. The AR route carries no such ceiling and no requirement to tie cover to the item sold – multi-year terms, renewals, and standalone products alongside the retailer’s range are all available – but it isn’t free of trade-offs either, which is exactly why the route has to be chosen on the product’s terms, not assumed from whichever option came up first.

Neither route exempts a single word of marketing – this is where the most expensive misunderstanding in the whole decision usually sits. The CCE exempts the activity of distribution; it does not exempt the promotion. Any communication inviting or inducing a customer to buy insurance is a financial promotion under section 21 of FSMA, whichever route the retailer uses.

That means the following apply in full either way: ICOBS 2.2 (marketing must be clear, fair and not misleading), ICOBS 4.1 (status disclosure, so the customer can identify who’s distributing the insurance), ICOBS 5.2 (demands and needs – the cover has to suit the customer), ICOBS 6.1 (appropriate information, including the IPID), and Consumer Duty (Principle 12) – the communication has to equip the customer to decide, not just to act.

The embedded-specific expectations hold regardless of route too: the insurer has to be identifiable in the purchase journey, and the insurance has to be presented as genuinely optional – not pre-selected, not implied as mandatory, not bundled in a way that makes opting out harder than opting in. Under an AR arrangement, the principal is accountable for whether the retailer meets these standards. Under the CCE, the distributor carries defined obligations under ICOBS 2.6 to ensure the retailer’s customer-facing activity complies. In both cases the obligations exist; what changes is who’s contractually on the hook for them, and how much of the work the retailer does itsel

The division of labour is the point of the AR model. The retailer owns the customer, the journey, and the brand. The regulated firm owns the permissions, the product governance, the approval of financial promotions, and the monitoring behind them. The retailer’s team doesn’t become a compliance function — it operates inside a perimeter someone else maintains, which is a materially different resourcing decision than trying to hold the perimeter itself.

Quotall operates through FCA-regulated infrastructure via Quotall (IS) Limited, an Appointed Representative of Movo Partnership (FCA
#823503), and sources and advises on the appropriate principal relationship where a retailer doesn’t want to hold its own FCA permissions. SGS Engineering runs its embedded product on this basis today.

The practical consequence for a retail programme is timing, not paperwork. Regulatory route, product design, and platform configuration are the same decision made three times over. Sequencing them properly — route first — is what keeps a project on the timeline it was scoped against, rather than discovering the mismatch after the insurer conversations have already started.

The regulatory route is usually treated as the last question in an embedded insurance project — a compliance sign-off applied to a product that’s already been designed. That sequence is exactly what produces the surprises: a premium ceiling discovered after pricing, a renewal model that was never available under the route chosen, a promotion that has to be rewritten because the exemption never covered it in the first place.

Both routes work. Neither is universally right. What separates the retailers who launch on schedule from the ones who stall isn’t appetite for regulation — it’s having decided, before the product spec was signed off, which perimeter they were building inside.

The route isn’t the constraint on the opportunity. Choosing it by default is.

See which regulatory route your product qualifies for before you scope it, and what it would add at your transaction volume →