Platform · Regulatory inventory
Every requirement that applies to you, cited to its source and owned by someone.
The regulatory inventory lists the requirements your business actually carries, worked out from how your business runs. Each one is cited to the regulation it comes from, has a named owner and a review cadence, and shows when it was last attested and whether that's overdue.
The problem it removes
A spreadsheet of rules nobody can defend line by line
- Most inventories start from a template, so they carry rules that don't apply to you and miss ones that do.
- A row that says "BSA" with no citation can't tell your examiner which section you think you meet, or why.
- Owners change, reviews slip, and nobody notices a requirement has gone a year without anyone attesting to it.
What you see
Each requirement, its source, its owner and its status
Every row tells you why it applies, where it comes from, who owns it and when it was last attested. Each citation carries a label that says how far it has been checked: to the pinpoint, to the section, or not yet. An unchecked citation is labelled as unchecked, never dressed up.
| Business fact | Your answer |
|---|---|
| Handles cash | No |
| Holds customer funds | Yes, at a partner bank |
| Licensing | State money transmitter |
| Requirement | Source | Owner | Last attested | Status |
|---|---|---|---|---|
| Verify customer identity | 31 CFR 1022.210(d)(1)(i) | BSA Officer | 2026-06-30 | Current pinpoint checked |
| Independent testing of the AML program | 31 CFR 1022.210(d)(4) | CCO | 2025-08-14 | Overdue past its set review date |
| Error resolution for electronic transfers | 12 CFR 1005.11 | Head of Ops | 2026-04-02 | Current section checked |
| State permissible investments | State statute | Finance | Not attested | Unchecked citation |
Illustrative example with invented data. Each row shows the business fact that made it apply.
How it works
Describe, apply, cite, own
- Describe your business. Five facts drive what applies: whether you handle cash, how accounts are funded, whether you hold customer assets, whether you carry balances, and which licenses you hold.
- Apply. Written rules decide which requirements follow from those facts. The same facts give the same inventory every time, and each row shows the fact that brought it in.
- Cite. Each requirement points to its source and carries a label for how far that citation has been checked. AI may draft a plain-English summary of a requirement; it never decides whether one applies.
- Review and own. A practitioner reviews the inventory with you, you assign owners and cadences, and each attestation is recorded with its date. A requirement past its cadence is flagged overdue.
When a rule changes, regulatory change management routes it to the requirement it affects, and your control library shows which controls answer each requirement.
Guardrails
What it will never do
- It doesn't guess at a citation. Where a source hasn't been checked, the row says so.
Where it shows up
The work this part does for you
Plain English
What this is, and how anyone does it
Reference articles from our library, cited to the published rules and standards. No sales copy.
- ReferenceRegulatory Inventory (Compliance Obligations Inventory), DefinedThe maintained list of laws, rules and guidance that apply to an institution, mapped to business lines, owners, policies and controls: where the expectation comes from, what each entry holds, and how it is kept current.
- ReferenceGRC (Governance, Risk and Compliance): Definition and FrameworksOCEG's definition and principled performance, the IIA Three Lines Model, the COSO frameworks, what GRC software holds, and the limits of a GRC program.
Connected parts
What it works with
Talk to a practitioner
Book a 15-minute chat with our founder.
A real conversation with a senior compliance leader, to see if there's a fit. Not a sales call, not a demo, no pressure.