Community banks & credit unions · $250M–$2B
You bought the AI, from loan origination scoring to deposit fraud detection, from vendors. The examiner still expects you to demonstrate independent validation of the models material to your risk profile, and your entire risk function is one or two people. Big Four quotes exceed the annual compliance budget. Fixed-fee independent evidence closes that gap.
The forcing function
OCC, FDIC and NCUA examiners apply model-risk and third-party-risk expectations to purchased AI just as they do to in-house models: the 2023 interagency third-party guidance makes the institution, not the vendor, accountable for understanding and validating what it runs. A vendor's marketing whitepaper does not satisfy that requirement.
The detail matters, because examiners read it. SR 26-2 replaced SR 11-7 in April 2026 and is aimed chiefly at larger institutions, and OCC guidance has clarified that community banks are not required to revalidate every model annually by default; the cadence is risk-based. Independence has not relaxed: whoever validates the model cannot be the party who built it or sells it, and reliance on vendor self-assessment is among the most common findings.
The constraint is budgetary. Big Four model validation runs US$100k–200k+ against a community-institution compliance budget that cannot absorb it, so validation files often stay thin until the first-day letter arrives. Fixed-fee, evidence-based review exists for exactly this situation.
What the examiner expects to find
Every AI-driven decision system you run, including the models embedded inside vendor platforms you may not think of as models: origination scores, fraud engines, transaction monitoring.
Evidence of model soundness produced by someone other than the vendor, covering inputs, assumptions, performance and limits, in a form an examiner recognises.
Findings frequently arise from the period between validations. Drift in a vendor's upstream data or model updates is your exposure from the day it ships, not from your next review date.
Under the interagency third-party guidance: what you asked the vendor, what they answered, and what you verified rather than accepted.
Why this passes review
A report from an unfamiliar vendor is a career risk for whoever accepts it. Triodian removes the dependence on reputation: every output a governed system emits carries a signed conformance record bound to a versioned rule set, and your examiner, or any independent reviewer can check that record independently, without dashboard access and without contacting us.
The capabilities behind it are shipped and badged deliverable now on this site: Structured Output Assurance, Bounded Command Governance, the Certifiable Conformance Pack, the Aggregate Drift Service and the Certified Miss-Rate.
Production proof: the governed-reasoning engine and provenance ledger behind these artefacts already run pinpole.cloud, a live commercial platform, at scale.
The first step
A 90-minute structured interview with your risk and engineering leads. The assessment requires no system access, log export or InfoSec review, so nothing about it needs your security team's approval.
Within 7–14 days you receive a Diagnostic Gap Report covering model architecture, data provenance, evaluation pipeline, runtime controls and aggregate-drift exposure, mapped to your regulator's examination guidance and your actual model inventory. It identifies the gaps the examination team is most likely to raise, so you can close them before the review begins.
| Fee | A$7,500 / US$5,000, fixed |
| Cycle | 7–14 days, interview to report |
| Access | None (interview only) |
| Credit | 50% creditable against the Evidence Pack within 45 days |
The assessment fee is shown in both AUD and USD. Later stages are shown in AUD; US engagements are quoted from the USD price book.
Where it leads
A$25,000 per pipeline · A$35,000 up to three
An audit-grade validation and aggregate-drift Evidence Pack for your third-party models, built from historical log exports through an encrypted bucket, with no vendor cooperation or production access required, at a fixed fee a community-institution budget can carry.
How the evidence is built →A$12,000 per year
An annual refresh of the Evidence Pack timed to your examination calendar, so the file shows a current independent review at every exam.
The Certified Miss-Rate →