Operational Risk and AI Governance Kit
Sponsor banks, examiners, and auditors review operational risk alongside compliance, and AI use is now part of that review. This kit covers information security, incident response, continuity, records, and third-party risk, with an AI governance policy that inventories every AI use, including tools built into vendor products.
$895
Per institution. Fintech or Bank edition. Includes 12 months of updates.
FintechBankOperational Risk and AI Governance Kit
DOCXXLSXPDF
What’s in the Operational Risk and AI Governance Kit
- AI governance policy: inventory, risk tiering, review before use, customer-facing and generative AI, third-party AI, and monitoring
- Credit underwriting model and AI governance policy
- Information security program policy and acceptable use standard
- Incident response and breach notification policy, and business continuity and disaster recovery policy
- Records retention and destruction policy with a records retention schedule
- Third-party risk management policy, third-party inventory, and risk tiering
Every file, by edition
Where a bank and a fintech run a program differently, each edition has its own version of the document. Where the rule works the same way for both, one document covers both editions.
Fintech edition: 10 files
Lending (1)
- Credit Underwriting Model and AI Governance Policy
Operational risk (7)
- Third-Party Risk Management Policy
- Information Security Program Policy
- Incident Response and Breach Notification Policy
- Acceptable Use Standard
- Business Continuity and Disaster Recovery Policy
- Records Retention and Destruction Policy
- AI Governance Policy
Tools and maps (2)
- Records Retention Schedule
- Third-Party Inventory and Risk Tiering
Bank edition: 10 files
Lending (1)
- Credit Underwriting Model and AI Governance Policy
Operational risk (7)
- Third-Party Risk Management Policy
- Information Security Program Policy
- Incident Response and Breach Notification Policy
- Acceptable Use Standard
- Business Continuity and Disaster Recovery Policy
- Records Retention and Destruction Policy
- AI Governance Policy
Tools and maps (2)
- Records Retention Schedule
- Third-Party Inventory and Risk Tiering
Kit facts
| Editions | Fintech and Bank editions. Choose the Fintech edition if a sponsor bank holds your accounts, cards, or loans; choose the Bank edition if your institution holds the charter, including banks that sponsor fintech programs. Credit unions use the Bank edition. |
|---|---|
| Files | Fintech edition: 10 · Bank edition: 10 |
| Formats | Editable Word and Excel files, with PDF reference copies. No macros, scripts, or links to outside data sources. |
| Version | Version 1.0, regulatory content current as of October 2026. |
| Updates | 12 months of updates included. Each file shows the date its regulatory content is current through. |
| After the first year | Updates continue at $134 a year (15% of the kit price). Automatic renewal is optional, chosen at checkout, and can be cancelled anytime. You keep the files either way. |
| License | One institution, internal use. Edit the files, remove our branding, and share your adopted versions with your sponsor bank, examiners, and auditors. Read the Terms of Use and license. |
| Delivery | Download right after checkout; the link is also sent by email. Card or invoice; see vendor information for procurement teams. |
- Secure checkout Payment is entered on Stripe’s encrypted checkout. Card and bank details never reach our servers.
(opens in a new tab) - Immediate delivery Your download link appears right after checkout and is also sent by email.
- Receipt and invoice Stripe emails a receipt and an invoice in your institution’s name for accounts payable.
- Safe, standard files Word and Excel files with PDF copies. No macros, scripts, or links to outside data sources.
- Edition replacement If you receive the wrong edition, email us within 30 days and we will send the correct one.
Not sure which kit fits?
Try the two free tools and the sample pages first, or ask about advisory support for a full program build.