AI Policy & Governance
Checks whether ownership, approval paths, risk appetite, and policy coverage are defined.
Free AI governance readiness assessment
AI Governance Readiness Assessment for Banks and Fintechs
Find the policy, vendor risk, model risk, reporting, and evidence gaps your next exam, audit, or board meeting may expose.
No account required. Responses are not stored on our servers.
Sample Readiness Snapshot
Board-ready output
42
of 60
Maturity band
Developing
Program elements are in place, but evidence and oversight artifacts need tightening before review.
Top gaps to prioritize
- Board AI reporting cadence not formally approved
- Vendor AI diligence evidence is incomplete
- Model inventory lacks owner and review dates
Built by practitioners
Grant Holloway — Founder, AegisAI Compliance
Grant spent years inside compliance and risk functions at financial institutions — navigating model risk management, vendor due diligence, and emerging AI governance with frameworks built for large banks and budgets built for community institutions. AegisAI was built to close that gap.
Every assessment, template, and tracker on this platform traces directly to the regulatory frameworks your examiners use: SR 26-2, OCC Bulletin 2026-13, FFIEC interagency guidance, and the NIST AI RMF.
SR 26-2 / OCC Bulletin 2026-13Model Risk Management (SR 11-7)NIST AI RMFFFIEC Third-Party GuidanceCommunity Bank AI Governance
“Every CCO I spoke to said the same thing: we know we need to act on AI governance, but we don't have the bandwidth to build it from scratch. AegisAI is the answer to that — practical frameworks, evidence-ready templates, and assessments built for the way financial institution examiners think.”
Why AI Governance Readiness Matters Now
Built for banks, credit unions, and fintechs
No account required
No server-side response storage
Methodology-based scoring
What the Assessment Covers
Your institution may already have AI exposure through vendor products, internal pilots, employee use of public tools, model enhancements, and automated decisioning. Regulators, auditors, and boards will ask who owns AI risk, which use cases are approved, how vendors are reviewed, how models are monitored, and where the evidence lives.
- Can you inventory AI usage across business units and vendors?
- Can you show who approved each use case?
- Can you explain how AI-related third-party risk is reviewed?
- Can you produce evidence for board, audit, or examiner review?
- Can you distinguish policy maturity from actual control readiness?
Get a Board-Ready Score and Gap Summary
The assessment produces a readiness score, maturity band, domain view, and prioritized gap summary your team can use to focus remediation.
Start the 5-Minute AssessmentAI Governance Readiness Report
Sample output shown for illustration.
Maturity Band: Developing
Overall AI Governance Readiness Score
42
/ 60
Prioritized gap summary
| Top Gap 1 | AI vendor inventory is incomplete |
|---|---|
| Top Gap 2 | Board reporting cadence is not defined |
| Top Gap 3 | Evidence ownership is unclear |
Six domain maturity view
AI Policy & Governance7/10
7/10
Vendor & Third-Party AI Risk5/10
5/10
Model Risk & Validation6/10
6/10
Data, Privacy & Consumer Impact7/10
7/10
Board, Audit & Reporting6/10
6/10
Evidence & Control Readiness5/10
5/10
Built Around Six Governance Domains
Six domains that reveal whether AI governance is ready for scrutiny.
Vendor & Third-Party AI Risk
Assesses whether AI embedded in vendor tools is inventoried, reviewed, and monitored.
Model Risk & Validation
Reviews how AI and model-related use cases are validated, monitored, challenged, and documented.
Data, Privacy & Consumer Impact
Looks at data use, privacy, explainability, fairness, and customer-impact controls.
Board, Audit & Reporting
Evaluates whether leadership receives useful reporting on AI risks, gaps, and remediation progress.
Evidence & Control Readiness
Checks whether the institution can produce the documentation needed for audit, board, or examiner review.
How the Calculator Works
It is designed for fast internal orientation, not a months-long readiness project.
1
Answer 30 practical questions across six AI governance domains.
2
See your score, maturity band, and domain-level results immediately.
3
Use the gap summary to prioritize remediation and board-ready follow-up.
Built for Compliance, Risk, Audit, Vendor Management, and Board Reporting
The output is useful across second-line, audit, vendor oversight, and leadership reporting conversations.
Compliance
Risk
Audit
Vendor management
Board reporting
Privacy and Data Handling
The assessment is designed to let buyers see the score and gap summary without creating an account or sending responses to a server.
Your assessment data stays private.
No account is required to start. Your responses are not stored on our servers. Results are generated from your answers and saved locally in your browser so you can view your score and gap summary.
- No login required
- No server-side response storage
- Local browser-based results
- Optional email capture only if you request an export, template, or follow-up review
Methodology and Regulatory Basis
The calculator is aligned to current model risk governance expectations, including SR 26-2 / OCC Bulletin 2026-13, with SR 11-7 mapping retained for continuity. It is not legal advice.
Preview the 6-Domain Methodology30 questions scored Yes, Partial, or No
Six governance domains with 10 possible points each
Aligned to SR 26-2 / OCC Bulletin 2026-13 language
SR 11-7 mapping retained for continuity
Bridge the Score to Templates and Evidence Tracking
After the score, higher-value resources can help teams turn gaps into policy updates, board materials, vendor review tasks, and evidence ownership.
Template store
Template packs map to common gaps such as AI policy, vendor diligence, model governance, board reporting, security controls, and AI incident response.
Browse TemplatesEvidence tracker
The planned tracker helps assign evidence owners, due dates, status, and documentation needed for review.
Assessment FAQ
Common questions from financial services teams before they start.
How long does the assessment take?
About 5 minutes. It includes 30 questions across six AI governance domains.
Do I need to create an account?
No. You can complete the assessment without creating an account.
Are my responses stored?
No. Assessment responses are not stored on our servers. Results are generated from your answers and saved locally in your browser.
Is this legal or regulatory advice?
No. The assessment is an educational and planning tool. It is not legal, regulatory, audit, or supervisory advice.
Who is this for?
The assessment is designed for banks, credit unions, fintechs, and regulated financial services teams working on AI governance, model risk, vendor risk, compliance, audit, and board reporting.
What do I get after completing it?
You receive an overall readiness score, domain-level results, and a prioritized gap summary. Optional follow-up resources may include a board-ready PDF, templates, or evidence tracking tools.
Start Your Free Assessment
Get a free readiness score and a practical gap summary without creating an account.
Start Assessment
No account required. Responses are not stored on our servers.