RiskSpan

The removal test separates two things this company does, and only one of them is artificial intelligence. Strip the AI and a very substantial business remains: a loan level data platform holding performance records on tens of millions of mortgages, a normalisation and validation pipeline, scenario and stress testing across more than seventy asset classes, and the flagship prepayment and credit models, which are quantitative rather than learned.

The credit model is built on a delinquency transition matrix and the prepayment model on a two component turnover and refinance framework, both classical econometric constructions. The genuine artificial intelligence line is real but narrower and more recent: CascAIde, introduced in 2024, applies model driven extraction and a rules engine to portfolio risk management, machine learning is applied to model validation to surface blind spots conventional techniques miss, and the company states it operates production systems processing billions of performance records. That is an established analytics platform with a genuine embedded intelligence line, which is the shape this index builds at this grade rather than rejecting.

The division of labour is clear and the controls on it are only partly specified. The platform forecasts and values; a person trades, provisions or hedges on the output, and nothing in the material describes the system taking an action on its own.

Analytics run automatically overnight at loan level so results are ready each morning, and users are given interactive model diagnostics for back testing plus a scenario library and the ability to save custom rate scenarios reflecting their own economic view, which is a real mechanism for a user to interrogate the output rather than accept it. Held off the top grade because no threshold, tolerance or escalation trigger is described anywhere.

Nothing states what happens when an overnight run produces results outside expected bounds, what the extraction component does when it cannot read a document confidently, or what the rules engine is permitted to decide without a person.

This is the strongest model transparency practice encountered in this index and it clears the bar directly, because the bar is not about being tested by someone else but about equipping the institution to validate the model itself.

The company holds public monthly calls in which its quantitative team walks through how its prepayment and credit models tracked against actual behaviour, naming what moved and why, so performance is discussed in the open on a fixed cadence rather than on request.

It publishes versioned update notes describing methodology changes in specific terms, including the split of the non qualified mortgage prepayment model into a unified turnover component and a refinance component segmented by documentation type, and the rebuild of the credit model onto a delinquency transition matrix framework. Clients receive interactive diagnostics for back testing rather than static reports.

The company separately sells model validation and model risk governance as a service and publishes research on applying machine learning to model validation. The honest limit, recorded rather than deducted: all of this covers the quantitative models, and nothing comparable is published about the behaviour of the artificial intelligence extraction component.

The scale figures are substantial and the customer attribution is not. Published case studies carry quantified results, including an implementation that reduced client resource support needs by 46 percent and an asset manager replacing an inflexible dealer supplied risk system, and every one of them identifies the client only by type and location. Corporate scale is stated as clients managing over 30 trillion dollars in assets and more than 45 million active mortgage loans.

External recognition is real but is not an outcome: a technology award from a housing finance trade publication and a listing on a major cloud marketplace. Held at this grade on the documented bar, which requires a named customer beside a quantified result, and no financial institution is named anywhere in the material reviewed.

No safety practice, output screening, red teaming or data boundary is described. The pooled data question is pointed here because the business model depends on aggregation: the platform combines public agency performance data, purchased third party data and client contributed portfolio data into one analytical estate, and its models improve as that estate grows.

Nothing states whether performance data contributed by one institution informs models serving a competing institution, whether a client can exclude its holdings from model development, or what becomes of contributed data when a relationship ends. For clients who are trading counterparties to each other in the same collateral, that silence is a commercially material gap rather than a formality.

No privacy policy detail, processing agreement, subprocessor list or retention schedule was located. The subject matter is loan level records describing individual borrowers, including credit score, loan terms, delinquency status and payment history, held at a scale of tens of millions of active loans and combined from public agency releases, purchased data and client portfolios.

Nothing states how long client contributed loan files are retained, what happens to them when a client leaves, or how borrower level attributes are segregated between the public and private sources they were assembled from.

No certification, attestation, trust centre or security page was located, and the absence is recorded as unlocated rather than proven. What makes it conspicuous is the data position rather than the company's size: the platform ingests and stores loan level performance records covering tens of millions of active American mortgages together with client portfolio holdings, and its buyers are banks, asset managers and insurers whose own third party risk processes will require evidence before onboarding.

A listing on a public cloud marketplace involves a commercial vetting step and is not a security assurance. Worth one targeted check, since a firm operating at this scale for these buyers is a likely holder of an attestation that simply was not surfaced.

The company is an analytics and services supplier to regulated institutions and holds no licence of its own, which is the correct posture for this shape and carries no penalty. Its work sits close to supervised processes without being supervised itself: outputs feed allowance calculations under the current expected credit loss standard, it provides model validation and model risk governance services that institutions use to satisfy supervisory expectations on model risk, and its material notes regulators among the audience for loan performance analytics. No regulator engagement, examination, registration or independent assurance over its own validation practice was located.

No fairness testing, differential outcome analysis or bias disclosure appears, and the exposure is real even though no borrower ever meets this vendor. Credit models projecting delinquency migration at loan level feed which pools get bought, at what price, and what allowance a lender books against them, and the prepayment model is segmented explicitly by documentation type, which correlates with borrower category.

Nothing published examines whether forecast accuracy differs systematically across borrower cohorts, geographies or product types, which matters because a model that is well calibrated on average and poorly calibrated on a subpopulation prices that subpopulation's loans wrongly. The company publishes work on using machine learning to find model validation blind spots, which is the right instinct pointed at other people's models rather than at this question in its own.

No liability position, accuracy warranty, error rate or remediation commitment is published. The structural position is one step further removed from the consumer than most of this index: the borrower has no relationship with this vendor and no knowledge of it, while its forecasts influence whether their loan is bought, how their servicing is valued and what loss is provisioned against them.

Between vendor and client the position is also unstated, and it matters here because the output feeds regulatory capital and accounting judgements, so an institution needs to know what it may rely on and what remains its own responsibility. Extensive documentation and back testing evidence support the institution's defence of a model it has adopted, which is a different thing from a stated allocation of responsibility.

Disclosure is generous at the data layer and silent at the model layer, which is the same split seen elsewhere in this index. Data sources are named, including a major property data provider for non qualified mortgage loan level performance, the government sponsored enterprises for agency performance data, and a named cloud data warehouse for client integration.

Nothing names a model provider, family, version or hosting arrangement for the artificial intelligence extraction component, and nothing states whether any third party model sits in the pipeline. Knowing where the training data came from without knowing what was trained on it leaves an institution unable to enumerate its own downstream dependencies.

More systems are named here than most of this index manages, and they sit at the data layer rather than the system of record. Snowflake integration is named, distribution and deployment run through a named public cloud marketplace as either on demand analytics or a managed service, loan level non qualified mortgage performance data is sourced from a named provider, and the platform ingests and validates client data alongside public agency data with stated access to third party data vendors.

Held off the top grade because nothing on the institution's own side is identified: no servicing platform, loan origination system, portfolio accounting system or order management system is named, and no public application interface documentation or integration count was located. The named plumbing is how data reaches the platform, not how the platform reaches the client's book.

The deployment side is described with unusual specificity and the residency side is absent. The platform is cloud native and offered in two clearly distinguished commercial forms, on demand analytics that the client runs itself or a managed service the vendor operates, published on a public cloud marketplace, with a modular structure that lets a client start with core data management and analytics and extend to custom workflows and user defined analytics.

A named cloud data warehouse integration supports clients keeping data in their own estate. Held off the top grade because no hosting region, residency commitment, tenancy model or single tenant option is stated anywhere, and for a platform holding client portfolio positions alongside borrower level records that is a question an institutional buyer will ask before the first meeting ends.

No price, tier, minimum or billing basis was located in the material reviewed. The structure is described clearly enough that a buyer can see what would drive cost, since the platform is modular and can be taken as on demand analytics or as a managed service with consulting attached, but nothing indicates whether charging is by asset under analysis, by loan count, by user, by compute consumed or by subscription. The public cloud marketplace listing is a route through which pricing terms may be published and none was confirmed here, so this grade is worth revisiting on a targeted check of that listing.

Breadth is evidenced rather than asserted, and it runs along two independent dimensions. By buyer, the platform serves investors, traders, portfolio managers, risk managers, servicing rights owners, private credit managers and the model validation functions inside institutions, with consulting delivered to asset managers replacing dealer supplied risk systems.

By asset, it covers more than seventy classes spanning residential whole loans, mortgage servicing rights, agency mortgage backed securities, private label securities and private credit. The quantified reach is unusual: clients managing over 30 trillion dollars in assets and more than 45 million active mortgage loans.

Use cases extend beyond trading into allowance calculation under the current expected credit loss standard and climate risk exposure, which are different institutional functions rather than the same one described twice.