RegReview · Capability
AI Governance
Inventory every AI tool. Apply a firm-specific use policy. Produce the evidence regulators are asking for. Delivered inside RegReview, aligned to NIST AI RMF and SEC 2024–2026 exam priorities.
What's inside
AI vendor inventory
Every AI tool used by the firm — ChatGPT, Copilot, model providers, embedded features — logged with data-flow, purpose, and human-review posture.
AI use-policy + attestations
Firm-specific AI use policy generated for your registration type, plus staff acknowledgements and annual refreshers stored to the exam file.
Risk classification
Classify each AI use case by client-impact, data-sensitivity, and reviewability — aligned to NIST AI RMF and SEC risk-based examination priorities.
Model change tracking
Version and log model upgrades, prompt changes, and dataset updates so you can answer 'what changed and when' during an exam.
Marketing Rule guardrails
Any AI-drafted client communication routes through Marketing Review before it goes out — enforcing SEC 206(4)-1 and FINRA 2210 automatically.
Human-in-the-loop evidence
Every agent hand-off logs the licensed reviewer's sign-off — the auditable checkpoint regulators want to see for AI-assisted work.
FAQ
What is AI Governance in RegReview?
AI Governance is the RegReview capability that inventories every AI tool your firm uses, applies a firm-specific AI use policy, and produces the evidence regulators are starting to ask for — vendor list, risk classification, human-in-the-loop sign-offs, and model change history.
Is this the same as the SEC's predictive-analytics proposal?
AI Governance is built to satisfy the SEC's expected AI-conflict-of-interest rulemaking, the SEC's 2024 exam priorities on AI, and NIST AI RMF. When the final rules land, AI Governance updates the policy templates and evidence register accordingly.
Does it govern our own use of ChatGPT and Copilot?
Yes — general-purpose tools (ChatGPT, Copilot, Gemini) are inventoried alongside compliance-specific AI. The use-policy sets guardrails on what data may be entered, which use cases require reviewer sign-off, and how outputs are logged.
How does it interact with the FIN Group AI agents?
Every FIN Group AI agent — Marketing Review, PST, Trade Surveillance, etc. — logs its outputs and reviewer sign-off into the AI Governance register. That means the same evidence file covers your firm's own AI usage and the AI agents doing your compliance work.