AI governance for financial services

Assess every model against the rules that apply to it.

GuardX tests your AI and ML models requirement by requirement against the EU AI Act, SR 26-2, the NIST AI RMF and your own policies. It works from evidence your firm already holds, and it flags what's missing instead of guessing.

Request a briefing See how an assessment works
NEW The GuardX Frontier Index — free quarterly rankings of frontier models on financial regulation
MODEL ASSESSMENT · SAMPLE
Retail credit decisioning v4.2
High-risk · EU AI Act Annex III
14
Met
3
Gaps
2
Evidence missing
EU AI Act · Art. 10
Data and data governance
Met
EU AI Act · Art. 14
Human oversight
Override path for automated declines is not documented.
Gap
SR 26-2 · Model risk management
Ongoing monitoring
No performance or drift report since the last release.
Evidence missing
NIST AI RMF · MEASURE 2.11
Fairness and bias evaluated
Met
ISO/IEC 42001 · Annex A.5
AI system impact assessment
Met
Changed since last approval: training data refreshed. Review reopened for Art. 10 and MEASURE 2.11 only.
Assessed against
EU AI Act
SR 26-2 (Fed · OCC · FDIC)
NIST AI RMF
ISO/IEC 42001
PRA SS1/23
OSFI E-23
Your internal policies
The assessment

From regulation text to a finding you can defend.

Each regulation is broken into testable requirements. Each requirement is checked against your model's evidence, and every result cites the clause it answers to.

01

Scope

Classify the model by use, jurisdiction and risk tier, and establish which regimes apply before any testing starts.

02

Map

Turn each applicable regulation into specific, testable requirements, reconciled where regimes overlap so nothing is assessed twice.

03

Evidence

Draw on what the firm already holds: model documentation, validation reports, data lineage, access and monitoring records. Missing records are flagged as gaps, never assumed.

04

Findings

A result for every requirement — met, gap or evidence missing — with the clause cited, an accountable owner and the remediation needed.

What you get

Ready for your validators, your auditors and your supervisor.

Outputs are built to be handed over, not reworked. Every conclusion traces back to a clause and a piece of evidence.

Requirement-level findings

A matrix of every requirement by model, with status, cited clause and supporting evidence.

Gap register

Each gap with an accountable owner, the remediation required and the regulation it closes against.

Evidence pack

The records behind each finding, assembled for validation, internal audit or a supervisory request.

Re-assessment on change

When a model or a rule changes, only the affected requirements are re-tested.

GuardX Frontier Index · Free · Published quarterly

Which frontier models know the rules — and follow them?

Every quarter, GuardX ranks leading frontier models against the regulations financial institutions operate under. Each model is scored on two things: whether it understands a regulation, and whether it adheres to it while carrying out real operational work. The rankings and methodology are free and open to everyone.

Regulatory understanding

Can the model state what a rule requires, when it applies and where its limits are? Tested with questions grounded in regulation text and supervisory guidance.

Operational adherence

Does the model follow the rule while doing the work? Tested on realistic tasks — KYC reviews, adverse action notices, complaint handling, credit memos — and scored on whether the output is compliant.

Regulatory domains
Model risk management
AI regulation
Fair lending
AML / KYC
Consumer protection
Data privacy
Operational resilience
Market conduct
Frontier Index · [QUARTER YEAR] edition
Layout preview — scores publish with the first edition
Rank Model Understanding Adherence Overall
1 [Frontier model]
—
2 [Frontier model]
—
3 [Frontier model]
—
Free Public · Quarterly

The Frontier Index

An open benchmark for the whole industry: how frontier models compare on financial regulation, across every domain and both dimensions.

  • Rankings by model, regulatory domain and dimension
  • Published methodology and test design
  • Updated every quarter as models and rules change
Get each edition
For large financial institutions

Use-case deep dives

The index tells you how models compare in general. A deep dive tells you which model is fit for your use case, under your rules.

  • Candidate models tested on your operational tasks
  • Scored against your jurisdictions and internal policies
  • Requirement-level findings and a model selection recommendation
  • Results feed straight into your model assessment
Request a deep dive
Centralized, but agile

Assessments that keep pace with the models.

Large institutions run many models and must answer for all of them. GuardX keeps that answer in one place without halting the work.

One picture

Data, access, model and control records the firm already holds are read into a single risk picture for every model.

The right desk

Findings go only to the functions the risk affects. Everyone else stays off the path, and the reason is recorded.

Only what moved

Each new release is compared with its last approval. Review reopens only for the requirements where the risk changed.

Built for the people who answer for AI risk

Model risk management
Validation scoped by regulation, with evidence already gathered.
Compliance
A clause-by-clause view of where each model stands under each regime.
CRO and second line
One portfolio view of regulatory exposure across every model in use.
Internal audit
A traceable record from requirement to evidence to decision.

See one of your models against the rules.

Bring a model or a use case and the regimes it falls under. We'll walk through what an assessment or deep dive would find.

Request a briefing