Industries · Financial and regtech software
Your bank customers will ask how AI builds the software they rely on.
Banks and insurers treat their software vendors as ICT third parties. Their vendor-risk and due-diligence questions increasingly cover how AI is used in your development process, not only in your product.
Why the question is coming
ICT third-party risk
In the EU, the Digital Operational Resilience Act (DORA) has applied to financial entities since January 2025, including how they manage their ICT providers. In Switzerland, FINMA's outsourcing rules set similar expectations.Questionnaires follow regulation
When a bank's obligations change, its vendor questionnaires change with them. AI in the software development lifecycle is now a natural question to ask.Three AI agendas
AI in your product, AI in how you build software, and AI in your operations have different owners. We work on the second one.
What a governed practice lets you show
- A written standard for how engineers work with AI agents, owned by someone named
- Permissions and hooks that enforce what agents may and may not do
- Rules for what may be sent to which model: source code, configuration, customer data
- Evidence from ACI of how AI is used across teams, at team level
- Engineers trained against a published curriculum with published assessment rules
Talk it through with us.
We can start with a Leadership Session that puts customer assurance on the agenda.
See the Leadership Session