Since the Insurance Distribution Directive (DDA) and the ACPR recommendation on the duty to advise, compliance is no longer an add-on: it is a foundation of the broking profession. Needs assessment, advice record, relationship-onboarding document, admissible audit trail — all obligations that, poorly equipped, turn into risk during an inspection or a dispute. Conversely, well-designed broking software makes these requirements automatic and invisible within the workflow. This article sets out what the DDA requires in concrete terms, and what your software must materialise to protect you without weighing down your day-to-day work.
What the DDA and the duty to advise require
The DDA requires the distributor to act honestly, fairly and professionally, in the best interests of the client. In concrete terms, this translates into an obligation to gather the policyholder's needs and requirements, to formulate advice consistent with that assessment, and to document it. The ACPR recommendation on the duty to advise sets out the supervisor's expectations: traceability of the assessment, formalisation of the advice record, and retention of an audit trail.
The key point is materialisation: it is not enough to advise well, you must be able to prove it. In the event of a complaint or an inspection, it is the documented file that stands as evidence. Excellent advice that is not recorded leaves you without a defence.
The documents your software must produce
Broking software equal to French requirements must natively generate the documents of the advice journey, pre-filled from data already entered, with no duplicate work.
- Relationship-onboarding document (DER): the broker's status, mandates, complaint handling.
- Needs and requirements assessment: the policyholder's situation, objectives and expectations.
- Advice record: the reasoned recommendation, consistent with the assessment.
- Audit trail: a time-stamped record of the steps, admissible in the event of a dispute or inspection.
From constraint to integrated reflex
The common mistake is to treat compliance as a separate administrative step, handled alongside the software in Word templates. This approach is time-consuming and fragile: forgotten documents, inconsistent versions, patchy traceability. Good practice is for compliance to be built into the sales workflow: at each stage of the underwriting, the software produces and archives the right document, automatically.
Equipped in this way, the regulatory obligation becomes an invisible reflex rather than a burden. The handler follows their usual sales journey, and compliance builds up in the background. This is also what distinguishes software designed for the French market from a generic tool: compliance is native, not bolted on. To place this criterion among the others, see our guide to choosing broking software (/blog/logiciel-courtier-assurance-comment-choisir).
Compliance, data and hosting
The duty to advise does not stand alone: it comes with the GDPR and the question of hosting your policyholders' data, ideally within the European Union, as well as anti-money-laundering (LCB-FT) obligations. Serious software lets you address these three aspects precisely — advice traceability, data protection, due diligence — without multiplying tools.
This is precisely the scope that CRYSTAL IT is adapting for France within CRYSTAL ASSUR, its broking solution proven by more than 500 firms and companies: the duty to advise and DDA documents, data hosting within the EU and GDPR compliance are among the workstreams for adaptation to the French market. Discover the approach on our dedicated page (/crystal-assur-france), and for a method of progressive compliance, see our article on digitalising a firm (/blog/digitaliser-cabinet-courtage-assurance).
The DDA and the duty to advise are not merely documents to tick off: they require an admissible audit trail that protects you in the event of an inspection or dispute. Good broking software turns this requirement into an automatic reflex — DER, needs assessment, advice record and audit trail generated within the workflow, without double entry —, while covering the GDPR and data hosting. It is this level of integration that CRYSTAL IT is targeting for France with CRYSTAL ASSUR: describe your firm, the first conversation is free and with no commitment.
Have a project or a question? Let's talk with a CRYSTAL IT expert.
Request a demo
