Aviva Selects Certa to Support Third-Party Risk Management Transformation

The UK’s largest insurer has chosen Certa to automate TPRM globally.

Certa, a Leader in the Gartner® Magic Quadrant™ for Third-Party Risk Management Tools for Assurance Risk Leaders, today announced that the firm has been selected by Aviva to modernise and automate its global Third-Party Risk Management (TPRM) programme. The award follows a full competitive RFP and spans Aviva's business lines for UK&I, Canada, UK General Insurance, Health and Aviva Investors. This marks one of the most significant engagements for Certa in the insurance sector to date.

Regulatory Alignment at the Core

Certa will streamline and automate Aviva’s third-party risk lifecycle, including onboarding, risk assessment, and ongoing monitoring across nine risk domains. With regulatory scrutiny of third-party and outsourcing risk intensifying across financial services and insurance, the programme will be built to keep Aviva ahead of evolving requirements. It will embed the EU's Digital Operational Resilience Act (DORA), the UK PRA's SS2/21 outsourcing and third-party risk expectations, EBA outsourcing guidelines, and Canada's OSFI B-10, giving Aviva a single source of truth for risk and compliance reporting across jurisdictions.

Active Intelligence, Centralised Risk Visibility

By integrating with Aviva's existing enterprise systems, the platform centralises financial, sustainability, and cyber-risk monitoring into one continuous, real-time view of third-party viability, conduct, and security posture — moving Aviva from static self-attestation to intelligence actively maintained by Certa's embedded AI agents.

“Aviva is pleased to be working with Certa as part of its ongoing efforts to enhance and modernise third-party risk management tooling capabilities. The collaboration will support Aviva's ambition to deliver a more streamlined, consistent and scalable approach to managing third-party risk across its operations. By leveraging Certa's platform, Aviva will benefit from improved visibility, increased efficiency and a more integrated approach to risk management and reporting. The programme reflects a shared commitment to supporting effective governance, regulatory compliance and operational resilience through modern technology and enhanced data insights.”

    - Helen Smith, Group Procurement & Offshore Business Services Director and Chair of Aviva ASEC

"We are proud to partner with Aviva on a programme of this scale and complexity. This is a landmark engagement for Certa — a sign of the trust that the UK's largest insurer has placed in our platform to manage risk across multiple business lines and regulatory regimes.”

    - Emilia Meldrum-Taylor, Certa's Chief Revenue Officer

‍

The partnership extends a period of strong growth for Certa in insurance. Aviva's selection shows the platform can support a highly regulated, multi-business-line organisation operating across complex jurisdictional requirements.

About Certa

Certa, an AI-native third-party risk management platform, unifies the full TPRM lifecycle - from onboarding to continuous compliance. Certa serves organisations in financial services, healthcare, life sciences, manufacturing, and other regulated industries across North America, Europe, and Asia.

Learn more at www.certa.ai. 

Download the full Gartner MQ report at www.certa.ai/gartnermq26

About Aviva

Aviva is a leading insurance, wealth, and retirement business serving customers across the UK, Ireland, and Canada, with around 25.3 million customers across these markets. Aviva is listed on the London Stock Exchange and is the UK's largest and most diversified insurer.

Media Contact: hello@getcerta.com

____

(1) Gartner®, Magic Quadrant™ for Third-Party Risk Management Tools for Assurance Risk Leaders, Antonia Donaldson & Nicholas Sworek (April 6, 2026)

(2) GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and MAGIC QUADRANT is a registered trademark of Gartner, Inc. and/or its affiliates, and are used herein with permission. All rights reserved.

Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner's business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.

‍