Tools

Regulatory applicability matrix

Answer a short profile and see which laws and rules apply to your products, by lifecycle stage, for a fintech or a bank, and which library document covers each one.

Complaint log and root-cause taxonomy

Every complaint from every channel, with deadlines, escalation, sponsor bank notice, and monthly trends.

BSA/AML and sanctions risk assessment workbook

Rates inherent risk and controls by factor, calculates residual risk, and maps your program to the National AML/CFT Priorities. Fintech and Bank editions.

Compliance risk assessment workbook

One set of scales for every risk unit: inherent and residual risk, trend, required response, and testing frequency.

Red flags applicability matrix

Your identity theft red flag schedule: covered accounts, the 26 Supplement A examples, detection controls, and responses.

Compliance testing plan

Sets each test’s due date from residual risk, builds the annual plan, and flags scheduling problems.

Transaction testing workpaper

One test, documented so another reviewer can re-perform it: attributes, sample size, results, exceptions, and conclusion.

Compliance testing report template

Executive summary, scope and approach, results by attribute, findings, and sign-off.

Board and committee compliance report

A quarterly reporting package for the board or compliance committee, with a key risk indicator appendix.

Issue and corrective action log

Sets plan and completion dates by severity, tracks aging, and flags past-due items and closings without validation.

Reg E error resolution log

Calculates every 12 CFR 1005.11 deadline from the notice date, including provisional credit, and flags anything late.

Regulatory change log

Tracks each development from first notice to validated implementation, with target dates set by impact.

Training matrix and completion tracker

Courses by role and frequency, with due dates, overdue status, and the escalation step your policy requires.

Records retention schedule

Citation-based retention periods, a legal hold register, and a destruction log.

Sponsor bank obligations crosswalk

Every approval, notice, report, and deadline in your program agreement, tied to a policy section, an owner, and evidence. Fintech edition.

Fintech partner due diligence and monitoring workbook

Checks each partner against board limits, tracks key risk indicators against thresholds, and includes a due diligence checklist. Bank edition.

Third-party inventory and risk tiering

Assigns each third party a risk tier and calculates review and SOC report dates.

Requirements and controls maps, seven domains

Every requirement in the library traced from its citation to the policy section, procedure step, control, and test step that meet it. Governance, BSA/AML, consumer protection, deposits and payments, lending, privacy, and operational risk.