Could You Reconstruct What Your AI Did Six Months Ago?
Examiners ask what an AI system was asked and answered on a past date. Many teams expect their AI provider to hold that record. Usually it doesn't.
Examination posture, framework coverage, and the artifacts auditors actually request.
Examiners ask what an AI system was asked and answered on a past date. Many teams expect their AI provider to hold that record. Usually it doesn't.
How hash chains, independent timestamps and offline verification let a reviewer check an AI audit trail for themselves.
How 24 jurisdictions across the Americas, Europe and Asia-Pacific regulate, guide and promote AI, and the common rules they share.
Third-party risk, the NAIC bulletin and evaluation tool, FINRA Rule 2210, Regulation B and the EU Omnibus: the AI rule changes for the CCO's Q3 review.
SR 26-2 sets principles for model risk. Where programs fall short, how examiners test each area, and a free eight-area gap assessment.
The NAIC's AI questionnaire for insurers is planned for adoption in November 2026. What it asks, and the records a compliance officer should have ready.
Yes. Supervision, recordkeeping, and communications obligations attach the moment an AI-drafted message reaches a client. Here is what that means in practice.
A decade-old bank questionnaire most large tech vendors already answer every year now has AI governance built in, and most AI companies haven't seen it coming
SR 26-2 rewrote the bank model-risk rulebook for the first time in 15 years, and left out the exact AI systems banks are racing to deploy.
Our SOC 2 Type I report covers Security, Availability, and Confidentiality. Most reports stop at Security alone. The Type II observation period is underway.
AI is entering exam document requests. The five artifacts examiners will ask for, why screenshots fail as evidence, and how to prepare your AI audit trail.
Regulatory updates
Short notes on SR 26-2, NYDFS 500, FINRA, the NAIC bulletin, the EU AI Act, and the employment-AI statutes, plus what we ship. A few emails a month.