01
AI Policy & Acceptable Use Framework
A board-approvable AI policy covering ownership, risk appetite, approval paths, and acceptable use boundaries. Structured to satisfy SR 26-2 and OCC Bulletin 2026-13 language on governance accountability.
Template Store
AI Governance Starter Kit for Small Banks and Credit Unions
Six ready-to-use templates covering every governance domain regulators, auditors, and boards will ask about -- delivered as a single ZIP download.
Buy Now -- $99
One-time purchase. Instant ZIP download. No subscription.
$99
one-time
- 6 documents
- Instant download
- Word + PDF formats
- SR 26-2 aligned
Regulators expect AI governance. Most small banks have no program.
SR 26-2 and OCC Bulletin 2026-13 have reset expectations for how financial institutions govern AI risk. Examiners are asking who owns AI risk, which use cases are approved, how vendors with embedded AI are reviewed, and where the evidence lives. For community banks, credit unions, and fintechs, the honest answer is often: we don't have that documented yet.
Building a governance program from scratch takes months. Retaining outside counsel or consultants to draft the foundational documents costs tens of thousands of dollars. And the window before your next exam, audit cycle, or board inquiry is shorter than you think.
The AI Governance Starter Kit gives compliance and risk teams a working foundation -- six documents that cover the governance domains regulators and auditors focus on most -- so you can stop drafting from a blank page and start closing gaps immediately.
What's included
Six documents covering every governance domain your next exam, audit, or board review is likely to probe.
02
Vendor AI Diligence Questionnaire
Thirty-question due diligence template for assessing AI embedded in third-party tools. Covers model explainability, data handling, bias controls, and ongoing monitoring obligations aligned to third-party risk management expectations.
03
Model Risk Governance Charter
Defines model inventory scope, validation requirements, challenge processes, and ownership assignments. Maps directly to SR 11-7 and SR 26-2 model risk management expectations for institutions using vendor or internal AI models.
04
Board AI Risk Reporting Template
Quarterly board reporting template covering AI exposure summary, approved use cases, open risk items, and remediation status. Designed for non-technical board members and formatted for inclusion in existing risk committee packages.
05
Evidence & Control Readiness Tracker
Spreadsheet-based tracker for assigning evidence owners, documenting control status, and maintaining an audit-ready record across all six governance domains. Built for exam and internal audit preparation.
06
AI Incident Response Runbook
Step-by-step playbook for identifying, escalating, containing, and documenting AI-related incidents. Includes notification thresholds, response roles, regulatory reporting triggers, and post-incident review format.
Who it's for
Built for the people responsible for AI risk at institutions that don't have a dedicated AI governance team yet.
- Chief Compliance Officers and compliance team leads
- Chief Risk Officers and enterprise risk managers
- CTOs and technology risk officers at community banks
- Internal audit teams preparing for AI-related exam coverage
- Vendor management and third-party risk teams
- IT risk leads at credit unions and fintechs
What you can do immediately after purchase
Each document is ready to adapt -- not a theoretical framework that requires months of customization before it's usable.
- 1Assign the AI Policy to your policy owner and schedule a board review
- 2Send the Vendor AI Diligence Questionnaire to your three highest-risk AI vendors
- 3Open the Evidence Tracker and populate your current AI use case inventory
- 4Adapt the Board Reporting Template for your next risk committee meeting
Get your governance foundation in place today.
One-time purchase. Instant download. No account required.
Buy Now -- $99
Secure checkout via Stripe
Not legal advice. Templates are educational tools designed to support internal governance programs.
Regulatory alignment. Structured around SR 26-2, OCC Bulletin 2026-13, and SR 11-7 language.
Questions? Contact us before purchasing.