SEO Services
Insurance Industry / Technical Guide
Automate FNOL Claim Intake & Triage for Insurance with n8n + Claude Step-by-Step Guide
A complete walkthrough for building an n8n + Claude pipeline that captures First Notice of Loss across email, portal and phone, extracts policy data, classifies severity, scores fraud signals, routes to the right adjuster, and writes a TPA-grade audit log — first acknowledgement out the door in under 90 seconds.
FNOL capture (email / portal / phone)
OCR + Claude policy extract
Severity + fraud score (Claude)
Adjuster routing (LOB + workload)
Claim file in Guidewire
Immutable audit log
Claimant SMS / email ack
1. The Problem — Why FNOL Backlogs Cost Carriers More Than the Claims Themselves
Every P&C carrier and TPA hits the same operational wall: First Notice of Loss arrives across half a dozen channels (email, web portal, phone via call center, agent fax, mobile app, EDI from a partner) and a human still has to read it, find the policy, decide if it’s a fender-bender or a total loss, check for duplicates, score fraud risk, and assign the right adjuster — usually under a regulatory clock. The 24-hour acknowledgement requirement in most state Unfair Claims Practices Acts hits before any of that work is done, and a missed FNOL is a complaint waiting to happen with the DOI.
Real numbers from a regional auto + property carrier (~6,200 FNOL/month)
| FNOL per month (auto + property + GL) | ~6,200 |
| Median time from FNOL to first acknowledgement | 11h 40m |
| Severity miscalls caught at adjuster reassignment | 14% |
| Duplicate claims opened on same loss | 3.1% |
| Suspected fraud caught at intake (vs SIU later) | 0.4% |
| Intake clerk hours / month spent on data entry | ~840 |
The brutal asymmetry: roughly 6% of FNOLs become 60%+ of paid losses. The system needs to spot the catastrophic injury claim, the suspicious nighttime single-vehicle loss, and the third claim from the same insured this quarter — within minutes, not the next morning when an intake clerk gets to their queue.
What “triage” means here
Triage is not a Yes/No fraud flag bolted onto a claims-handling form. It’s a four-axis decision that runs on every FNOL the moment the data lands:
- Severity tier: minor PD, moderate PD, BI, total loss, catastrophic / fatality. Drives reserve, adjuster level, supervisor notification.
- Coverage applicability: which line of business, which coverage on the policy, deductible, sublimits.
- Fraud signal score: rules + Claude reasoning over claim narrative + insured history. Flags only — never auto-deny.
- Routing: internal staff adjuster vs assigned IA vs SIU referral, weighted by current workload and licensing state.
2. System Architecture
Eight components, each replaceable. The orchestration layer is self-hosted n8n inside the carrier’s own VPC so InfoSec and Compliance can audit every external API call that touches PII or PHI. Nothing leaves the perimeter except scrubbed prompts to Claude and signed lookups against the fraud data providers.
The stack
Cost estimate (6,200 FNOL/month)
| Claude Sonnet (~6.2k severity + fraud calls, ~3,200 tok in / 600 tok out) | ~$280 |
| Claude Haiku (document classification, ~12k calls) | ~$45 |
| Textract / Document AI (police reports, ACORDs, photos) | ~$520 |
| LexisNexis + ISO ClaimSearch lookups | ~$1,860 |
| VM (n8n + Postgres + QLDB on AWS, in-VPC) | ~$310 |
| Twilio (call transcripts, claimant SMS) | ~$140 |
| Total / month | ~$3,155 |
Roughly $0.51 per FNOL. The intake-clerk labor it replaces is $4–$7 per FNOL fully loaded; the LAE saved by getting reserves right at day 1 dwarfs both. The same orchestration layer slots into our wider AI automation services.
Multi-Channel FNOL Intake
FNOL arrives in whatever shape the claimant or producer chose. The pipeline normalizes three primary channels into a single internal event: the email box monitored by the claims department, the web portal where insureds and agents file directly, and inbound phone calls captured through Twilio with real-time transcription.
Channels and capture method
- Email ([email protected]): n8n IMAP node polls every 30s. ACORD forms, police reports, photos and free-text body extracted as separate attachments. Email body itself becomes a structured note on the claim.
- Portal webhook: the insured/agent portal POSTs a JSON FNOL with claimant info, loss description, optional photos. HMAC-signed.
- Phone (Twilio): dedicated DID for after-hours FNOL. Twilio’s transcription is good enough as raw input — Claude cleans it. Recording stays in S3 for adjuster playback.
- EDI / partner feed: for fleet, commercial auto, mortgagee notices. Daily SFTP pickup parsed into the same internal event shape.
Normalized intake event
Every channel converts to one schema before any downstream node runs. This makes severity, fraud and routing logic channel-agnostic.
OCR + Claude Extraction
The unstructured payload is where the work is. A police report PDF, a photo of a damaged bumper, a 4-paragraph email — none of that is queryable until it becomes structured fields on the claim. OCR pulls the text layer; Claude turns it into the canonical FNOL extraction object that the rest of the pipeline reads.
OCR cascade
- Document classifier (Claude Haiku): reads the first page only, returns
police_report,acord_2,repair_estimate,medical_bill,photoorunknown. - OCR engine selection: Textract Forms+Tables for ACORD, Textract Queries for police reports, Document AI for handwritten supplements, Claude vision for damage photos.
- PII scrubbing: SSN, full DL number, full DOB, full account numbers replaced with last-4 tokens before any external Claude call. Whitelist of fields that may leave the VPC.
- Claude extraction: Sonnet reads the OCR text + email body + transcript and emits the canonical FNOL extraction object.
- Confidence scoring: any field with confidence < 0.85 is flagged for adjuster review and never auto-populates the policy match.
Claude extraction prompt
Policy Lookup
Once the claim has a policy number candidate (or a claimant name + DOB + state for a fuzzy match), the workflow hits the policy admin system to confirm the policy was in force at the date of loss, pull the schedule of coverages, and surface deductibles and sublimits. This is the first step where a soft-fail decision matters: if the policy isn’t found, we still write the FNOL — we just route it to a senior adjuster with an “unverified policy” flag.
Lookup hierarchy
- Exact policy number — direct lookup, validate “in force” status against date_of_loss.
- Producer + last name + zip — fallback when claimant gave the policy “for a Honda Civic” instead of the number.
- VIN match (auto) — pulled from photo OCR or police report. Highest specificity for auto.
- Address + line of business (property) — fuzzy match on insured location, then human review on the top 3 candidates.
PolicyCenter lookup (n8n HTTP Request)
Severity Classifier
Severity drives reserve, adjuster level, and supervisor notification within minutes of FNOL. A miscall in either direction is expensive: reserving a fender-bender as a BI ties up loss reserves the carrier can’t redeploy; reserving a catastrophic injury as moderate PD blows the entire loss-development curve and triggers regulatory questions later. Claude reads the extraction object plus the policy and emits a structured severity object.
The 5 severity tiers
Property damage only, no injuries reported, est. < $5k.
PD $5k–$25k, possible third-party PD, no injuries.
Bodily injury reported, ER visit only, no hospitalization.
Hospitalization, surgery, or total-loss vehicle. Senior adjuster.
Fatality, brain injury, paralysis, multi-vehicle pile-up. Page on-call sup.
Severity classifier system prompt
Sample output
Fraud Signal Scoring
Fraud scoring at FNOL is a referral signal, not a denial decision. The system surfaces patterns — staged-loss indicators, claim-frequency anomalies, suspicious narrative phrasing — and either (a) writes a flagged note for the adjuster, or (b) generates a soft SIU referral. Nothing is auto-denied. Ever. The model output never reaches the claimant; only the adjuster’s eventual decision does.
Two-stage scoring
- Deterministic rules layer — runs first, in n8n. ISO ClaimSearch hit on same VIN within 24 months, claimant has >3 prior claims in 36 months, loss reported >14 days late, loss in claimant’s home zip with no police report. Each rule is a labeled signal, not a verdict.
- Claude reasoning layer — reads the narrative + LexisNexis enrichment + rules-layer signals, produces a structured fraud signal score with explicit reasoning over the specific text.
Fraud signal output schema
Routing thresholds
| Band | Score | Action |
|---|---|---|
| low | 0–34 | Note attached. Standard adjuster assignment. |
| elevated | 35–64 | Adjuster reviews flag during initial contact. Optional SIU consult. |
| high | 65–100 | Mandatory SIU referral. Adjuster proceeds normally — no delay, no claimant-visible difference. |
Adjuster Routing
The right adjuster on the file at hour zero matters more than almost any later step. Routing is a weighted decision over line of business, severity tier, claimant state (adjusters are licensed by state), current open-file count, and language preference. The output is a single adjuster_id plus a fallback list in case the primary is OOO.
Routing matrix (auto + property carrier)
| Severity | Adjuster level | Reserve authority | SLA to first contact |
|---|---|---|---|
| tier_1 | Inside auto, fast-track | Up to $7,500 | 4h |
| tier_2 | Inside auto, standard | Up to $25k | 4h |
| tier_3 | BI specialist | Up to $100k | 2h |
| tier_4 | Senior BI / total-loss | Up to $500k | 1h + supervisor pinged |
| tier_5 | Catastrophe team + on-call sup | Sup-only | 15 min, page out-of-hours |
Routing query
If the top result is OOO (calendar integration), the workflow walks the LIMIT 3 list. If all three are OOO, the file routes to the supervisor queue with a flag. The supervisor never sees a tier_1 fast-track unless every fast-track adjuster in the state is unavailable — which is the right escalation, not a fallback into a slower queue.
Claim File Creation + Acknowledgement
Once severity, fraud, and routing are decided, the workflow opens the claim file in Guidewire ClaimCenter, attaches every document and photo, sets the suggested reserve range, posts the AI notes (clearly labelled as model output), and assigns to the chosen adjuster. The claimant gets an acknowledgement SMS and email with the claim number, the assigned adjuster’s name, and the SLA for their first contact.
ClaimCenter create payload
Claimant acknowledgement (SMS + email)
The acknowledgement is written by Claude using a tightly constrained template. It never quotes the model’s severity or fraud output to the claimant. It states the claim number, the adjuster’s name, the contact SLA, and what to send next.
Compliance: TPA Audit, State DOI, NAIC Model Conduct
Insurance is regulated at the state level by every state’s Department of Insurance, with model laws coordinated through the NAIC. AI in claims is now explicitly addressed in NAIC Model Bulletin on the Use of AI Systems by Insurers (2024) and adopted in some form by most states. Treat compliance as the design spine, not a bolt-on.
Hard rules that drive the architecture
- No automated denial. The model output never produces a coverage decision, denial letter, or payment. A licensed adjuster signs off on every adverse action.
- No automated fraud accusation. SIU referral is internal. The claimant never sees a “we suspect fraud” message generated by the model.
- Acknowledgement clock. Most state UCPA require 10–15 days for written acknowledgement; the workflow’s sub-90-second ack massively exceeds the standard. Log the timestamp in the audit ledger.
- Adjuster of record. Every state requires a licensed adjuster on every claim. The assigned_adjuster_id is the regulator’s accountable human, regardless of how the routing was decided.
- Model card. NAIC Bulletin expects an internal model governance document covering training data, intended use, known limitations, and human-oversight points. The severity classifier ships with one; updates require formal version bumps.
TPA-grade audit log
The audit log is the document the carrier hands to a TPA, an external auditor, or a state DOI investigator. It must be immutable, complete, and queryable by claim and by adjuster. AWS QLDB or any WORM-storage equivalent works; the schema below is what we ship.
Model card (severity classifier excerpt)
- Intended use: rank-and-route triage signal at FNOL. Reserve recommendation only.
- Out of scope: coverage determinations, denial letters, settlement amounts, subrogation strategy.
- Calibration set: 24 months of carrier-internal closed claims, stratified by tier.
- Known limitations: tends to under-tier when injury narrative is sparse on portal submissions; mitigated by the precautionary upgrade rule when injuries_reported is true.
- Bias review: quarterly tier-distribution audit by claimant zip and language. Any drift >5% triggers a prompt review.
- Human oversight: tier_5 is supervisor-paged; tier_confidence < 0.7 forces human review pre-reserve; every adverse outcome is human-decided.
Measured Results — 90 Days In
Numbers from a regional carrier deployment (~6,200 FNOL/month, 38 staff adjusters, 3-person SIU, 1 supervisor on-call) after the first full quarter. Claim volume held steady — every gain comes from speed, severity accuracy, and labor reallocation.
The metric the chief claims officer cared about most: severity miscalls caught at adjuster reassignment dropped from 14% to 4%. That is the number that lets the actuarial team trust the day-1 reserve enough to release prior-year IBNR with confidence — the downstream financial leverage of getting tier right at FNOL is much larger than the obvious labor saving.
Implementation Timeline & Cost
- n8n self-host + VPC + InfoSec review: 30–50 hrs
- Multi-channel intake (email + portal + Twilio): 24–36 hrs
- OCR cascade + PII tokenization: 30–46 hrs
- Claude extraction prompt + golden-set backtest: 28–40 hrs
- PolicyCenter integration + as-of-date logic: 24–36 hrs
- Severity classifier + reserve calibration: 30–44 hrs
- Fraud rules layer + LexisNexis + ISO ClaimSearch: 32–48 hrs
- ClaimCenter integration + audit ledger: 40–60 hrs
- Adjuster routing + license/state matrix: 18–28 hrs
- Model card, governance docs, DOI brief: 16–24 hrs
- Adjuster + supervisor training: 10–14 hrs
- Week 1–2: Discovery, golden-set FNOLs, InfoSec / Compliance kickoff
- Week 3–4: Intake (email + portal + Twilio) + OCR cascade
- Week 5–6: Claude extraction + severity classifier + calibration
- Week 7: Fraud rules + LexisNexis + ISO ClaimSearch wiring
- Week 8: ClaimCenter integration + audit ledger
- Week 9: Shadow-run alongside live intake (no auto-create)
- Week 10: Cutover by line of business, supervisor handover
- Includes: model card, DOI-ready governance pack, monthly drift report
FAQ
Want this built for your claims operation?
SEOKRU deploys this exact system in 10 weeks, end-to-end. We backtest the severity classifier against your last 24 months of closed claims, wire the OCR cascade and policy lookup, integrate ClaimCenter (or DCT / ClaimsXPress), and ship the model card, governance docs, and DOI-ready audit ledger. The carrier keeps full ownership of every component — workflows, prompts, audit ledger, the lot.
Talk to an insurance automation engineer