Abrigo

Strip the AI out and Abrigo still runs: loan origination, transaction monitoring and allowance calculation are deterministic software assembled from Banker's Toolbox, Sageworks and MST years before the models arrived. Its AI portfolio, APX and AskAbrigo among it, is pitched as taking repetitive work off staff, a layer on the product rather than its engine.

Generated credit narratives, allowance narratives and loan reviews come out as editable drafts the institution approves, the AML Assistant ranks and summarizes alerts without closing them, and the institution configures the fraud engine. Missing are published thresholds and any statement of what APX, the agentic lending product, may complete without review.

Explainable AI is defined only as outputs meant to be understandable and defensible, which restates the goal rather than describing a method. Validation methods, a model inventory and drift monitoring go unpublished, and supervisory model risk guidance is never cited, though Abrigo's buyers are examined against it and it sells allowance and stress testing tools.

First United Bank and Trust, a Kentucky community bank, cut daily fraud review from four hours to under one with Abrigo Fraud Detection, caught about $130,000 in counterfeit checks and recovered the cost within two months, with its fraud lead named. Bank Independent and CommunityAmerica Credit Union add quoted executives, while the 90 percent plus detection rate and the 40 percent cut in manual work for APX carry no customer name.

The fraud product runs on consortium data and the AI material credits insight from thousands of institutions, which implies client information moves across the customer base. Whether that data trains shared models, whether an institution can opt out and whether outside model providers receive it are questions the AI approach page leaves open.

Privacy Shield still appears on the data platform security page as a framework Abrigo participates in, though it was invalidated in 2020 and replaced in 2023. Beyond that and general promises of encryption and access controls, neither that page nor the AI approach page sets out retention periods, subprocessors or deletion rights, a gap that weighs on a vendor holding transaction level data for community lenders.

Two audited reports are named, a SOC 1 Type 2 and a SOC 2 Type 2, and clients receive both through the Vendor Due Diligence portal; the SOC 1 counts because allowance figures feed audited financial statements. Prospects get no direct access, and neither report's period nor its auditor is published.

Federal examination stands behind Abrigo's position: its data platform security page says the FFIEC agencies examine it as a Technology Service Provider, with its security program aligned to FFIEC guidelines. That supervision covers Abrigo as a supplier to banks and does not approve any AI product.

Credit decisions are in reach of the AI: APX automates lending work, and the Lending and Loan Review Assistants write credit narratives and review consumer, commercial and small business loans. Privacy and employee impact get space on the AI approach page, yet it publishes no fair lending, disparate impact or adverse action content, a silence that stands out because Abrigo also sells AI governance advisory to the same banks.

When an AI generated output proves wrong, Abrigo publishes no commitment to stand behind it, and an approved credit or allowance narrative goes out under the institution's name. Consortium signals widen the exposure: a customer wrongly flagged can be affected at banks that never assessed them, with no published appeal route or expiry for the signal.

AskAbrigo, APX and the lending assistants are generative tools, yet no model, provider or version is named for any of them. Abrigo argues its tools are safer for sensitive bank data than general purpose AI platforms, a claim that naming the providers and their terms would back up.

Systems of record live inside the products themselves: the loan origination file, the allowance calculation and the anti money laundering case file. Developer documentation at developer.abrigo.com, a partner portal and the Abrigo Connect data platform give a public interface, though the homepage names no core banking or general ledger connector, which matters to community banks running one of a few well known cores.

Hosting comes down to backup and replication across redundant datacenters, with no provider, region or on premises option named on the pages describing the platform. That leaves a bank's vendor review without the basic answer of where its data sits.

Prices, tiers and module rates appear nowhere across the product range, and every route ends at a demo request. Starting small with one assistant and scaling is the pitch, yet a buyer cannot see what a single module costs or whether it needs the underlying product license.

Community and regional banks and credit unions make up the customer base, more than 2,400 of them in the United States, and each buying center inside them gets its own material, from lending and credit risk to financial crime and data. Global banks sit outside that deliberate focus.