Shiboleth

The removal test leaves manual audit, which the company identifies as the current state of the industry it serves. Generative models audit customer conversations to flag violations, natural language processing converts unstructured compliance material into structured findings, and reports to regulators are drafted automatically. The founders state the enabling condition directly: language models allow whole categories of manual compliance process to be automated in ways that were not previously possible.

The oversight construction is stated in the right terms and in the right place. The platform provides access to true source materials and enables human oversight at every step so that final decisions remain with the compliance team, which means a finding can be traced back to the underlying evidence rather than accepted. Output is explicitly described as first drafts of regulatory reports, so the human finishes the work rather than approving finished text. Held at B because automating 90 percent of back-office compliance tasks leaves the retained 10 percent undefined, and no threshold or escalation rule is published for which findings require review.

Explainability is positioned as the product's defining property rather than an added feature, with the company describing itself as using explainable artificial intelligence and its chief executive stating that the platform does not just automate compliance but makes it transparent, explainable and audit-ready from day one. Access to true source materials behind every finding is the practical mechanism, since a compliance officer can verify rather than trust. Held at B because no detection accuracy, false positive rate or validation result is published for models flagging violations that trigger remediation.

One customer is named and it is the most relevant one available in this market, a bank widely regarded as the leading sponsor institution in banking-as-a-service, which uses the platform to save months of manual work automating audits and drafting regulatory reports. The company joined the principal United States industry association for responsible fintech and innovative banks, whose head is quoted describing it as at the forefront of responsible innovation in consumer lending compliance.

It emerged from a well known accelerator with a 1.5 million dollar seed and states it is live with customers. Held at B because that is one named institution and no volume, count or outcome measure accompanies it.

No boundary statement was located, and the position is structurally delicate. The platform sits between sponsor banks and their fintech partners, observing compliance failures on both sides, and serves competing institutions in the same programmes. Nothing states whether findings or patterns from one bank's partner monitoring inform another's, or what a fintech being monitored can see about what its sponsor bank sees.

No data protection agreement, retention schedule, subprocessor list or deletion commitment was located. The platform ingests recorded customer conversations, complaint records and lending files across multiple institutions, which is among the more sensitive material any vendor here handles, and none of the terms governing it are published.

No attestation, certification, trust centre or enumerated framework was located for the company. The chief executive holds recognised security and penetration testing certifications personally and came from a security engineering background, which is relevant context and is not the same as an assessed organisational control environment, and a sponsor bank connecting partner programme data would ask for the latter.

The product exists inside a specific supervisory moment and shows knowledge of it, maintaining a database of consumer regulator complaints and public enforcement actions as an active signal source and generating the reports institutions file with government. Membership of the principal industry association for banks and fintechs places it inside the policy conversation. Held at B because no statute, rule or interagency guidance is mapped to product capability in published material, which the dedicated compliance vendors in this index do explicitly.

Consumer protection is the stated purpose rather than a by-product, with the founders describing the aim as enhancing consumer protection in one of the most litigious industries, and the mechanisms support it: complaint management is automated so complaints are actually processed, conversations are audited for violations that would otherwise go undetected in sampling, and marketing material is reviewed before it reaches borrowers. Held at B because no outcome is measured, and nothing describes whether the models detect violations consistently across different speakers, languages or borrower populations.

No guarantee, indemnity or correction process was located. Two parties are affected and neither is addressed: the fintech partner whose programme is flagged by a model in a report to its sponsor bank, with commercial consequences that can include termination, and the borrower whose conversation was audited, who has no stated route to know that occurred or to correct a mischaracterised interaction.

Language models are referenced as the enabling technology without any base model, provider, hosting arrangement or subprocessor being named. The complaint and enforcement action database is described as the company's own asset, which is useful, and its sources and update cadence are not stated, both of which determine whether a compliance signal derived from it is current.

No named integration, interface documentation or connected system was located. A platform auditing customer conversations, managing complaints and tracking issues must draw from call recording, complaint management and loan servicing systems, and how it connects to any of them is not described, which matters more here than usual because monitoring partner programmes requires reaching into systems the monitoring bank does not itself operate.

No hosting provider, region selection, residency commitment or private deployment option was located. Banks placing recorded customer conversations and partner programme records with an external platform would examine processing arrangements during vendor review, particularly where the same platform serves institutions on both sides of a commercial relationship.

No pricing, packaging or basis of charge was located. A claim of automating 90 percent of back-office compliance tasks frames the saving without indicating the cost, and for a platform sold to both sponsor banks and their fintech partners, whether it is charged per programme monitored, per institution or per review is what determines who adopts it.

Buyers span banks, fintech companies and non-bank lenders, and the platform serves both sides of the same relationship, giving a sponsor bank visibility over partner programmes while also serving the partners themselves. Functional coverage runs across complaint management, call monitoring, issue tracking, marketing review and regulatory reporting. Coverage is confined to United States consumer lending, which is deliberate specialisation rather than a limitation, and no international or commercial lending presence is evidenced.