Nimbus Direct Insurance Business Plan › Section 8 › Operations & Technology Platform

8.1 Operating Model Philosophy

Nimbus’s operating model is built on three principles: automate
everything that can be automated, design for the customer’s simplest
journey, and protect against tail-risk through redundancy and
disciplined data governance. The Company will not attempt to build all
capabilities in-house; rather it will select best-of-breed third-party
platforms and integrate them through its proprietary data fabric and
orchestration layer.

8.2 Technology Architecture

The Nimbus technology stack is cloud-native and built around a modern
microservice architecture. Key components:

Core Insurance Platform

• Policy administration & billing — a
  configurable, API-first policy core (vendor selection from a shortlist
  including OWLS Software, Sapiens IDIT, Root Platform’s low-code
  framework, or a custom build on AWS managed services). Final selection
  based on total cost of ownership and configurability over a five-year
  horizon.
• Claims management — automated First Notification
  of Loss (FNOL) intake via app, web and WhatsApp; automated triage and
  segmentation; straight-through processing of low-complexity motor and
  contents claims; integration with assessor and panel-supplier
  networks.
• Underwriting engine — proprietary risk-scoring
  service integrating third-party data (TransUnion credit bureau, eNaTIS
  vehicle data, geospatial risk from Geospatial AI, weather-event
  probability).
• Customer engagement layer — single customer view
  across web, mobile, contact centre, and partner channels; embedded chat
  and conversational AI assistant.

Data & Analytics

• Lakehouse architecture — Snowflake or
  Databricks-based data platform combining warehoused and streaming
  data.
• Machine learning models — production models for
  pricing, churn prediction, fraud detection, claims severity prediction,
  and lifetime value optimisation. All models versioned, monitored, and
  governed under a formal Model Risk Management framework aligned with PA
  Prudential Standard GOI 3.1.
• Business intelligence — self-service BI for
  product, finance, and underwriting teams; daily executive dashboards
  covering GWP, loss ratio, expense ratio, NPS, and capital
  coverage.

Infrastructure & Security

• Cloud provider — AWS, with primary deployment in
  the af-south-1 (Cape Town) region and disaster-recovery in eu-west-1
  (Ireland).
• Information security — ISO 27001-certified
  Information Security Management System; alignment with NIST
  Cybersecurity Framework v2.0; quarterly external penetration testing;
  annual third-party SOC 2 Type II audit.
• Privacy & data protection — full POPIA
  (South Africa) and Data Protection Act, 2018 (Botswana) compliance;
  appointed Information Officer; data-minimisation by design.

8.3 Operating KPIs (Target Steady-State Year 5)

8.4 Vendor & Reinsurer Ecosystem

Critical third-party relationships are summarised below. All vendor
engagements will be governed by formal Operational Risk Management
policies, including a tiered vendor classification (Tier 1:
business-critical; Tier 2: significant; Tier 3: standard) with
corresponding due-diligence, contractual, and ongoing-monitoring
requirements.

8.5 Headcount Plan

Confidential — this business plan is provided to prospective investors and lenders for evaluation purposes only and may not be reproduced or distributed without the written consent of Nimbus Direct Insurance Group (Pty) Ltd.