Does your AI use case meet FINMA's expectations? Know in three weeks.

Who it is for

Banks, FINMA-licensed FinTechs, asset managers and payment service providers that are piloting or planning an AI use case, such as pre-screening transaction alerts, drafting client correspondence, searching directives and contracts or supporting the credit process, and must be able to show the supervisor how they keep the risks under control.

What FINMA expects

With guidance 08/2024 “Governance and risk management when using artificial intelligence”, FINMA expects institutions to adequately identify, assess, manage and monitor AI risks. It names operational risks including model risks such as lack of robustness, correctness and explainability as well as bias, plus data risks, IT and cyber risks, dependence on third parties, and legal and reputational risks. For banks, Circular 2023/1 on operational risks and resilience applies as well, and the Swiss FADP for personal data.

What you have after three weeks

An entry for your AI inventory with purpose, data, model, providers, risk rating, owners and the point where a person decides. An assessment of every service and provider used in ClearSky, with third-party dependencies and outsourcing, each finding with severity and status. Controls for model risks with measures and thresholds. And a target architecture with an action plan and a fixed price for implementation.

Three weeks, three results

01 /

Week 1: classification

Capture the use case and data flows, rate the risk, create the AI inventory entry. On Friday you decide: continue, or stop at half the price.

02 /

Week 2: assessment

Assess services and providers in ClearSky, define controls for model risks.

03 /

Week 3: target picture

Target architecture with data location, human oversight and signed audit trail, action plan, handover to compliance and risk management.

Frequently asked questions

Do you need real client data?

No. We work with descriptions, data flows and documentation of the services used.

Is the guidance binding?

It is not a law, but it shapes how FINMA judges in supervision whether an institution has the risks of using AI under control.

Do you promise that FINMA will accept the result?

No. We provide the architecture and the evidence your compliance function can argue with. We do not give licensing or legal advice.

What happens after the check?

The action plan states a fixed price for implementation. The price of the check is fully credited if you implement with us.