Models now shape pricing, forecasts, inventory and credit calls, vendor selection, and
increasingly the close itself. In a regulated business that raises a question no vendor
demonstration answers: when the decision is challenged — by an auditor, a regulator, a customer,
or a court — what can be proven?
For most organizations the honest answer is very little. The prompt is gone. The model version
changed without notice. The retrieved documents were never retained. Nobody can say whether a person
reviewed the output or waved it through. The control environment that took twenty years to build around the ERP does not yet exist around AI tools.
This is a finance problem before it is a technology problem. It belongs on the
same shelf as segregation of duties, spend authority, and revenue recognition, and it will be
examined the same way.
"Regulated" doesn't mean banks. It means anyone whose numbers face an auditor, a lender, a customer contract, a privacy regime, a legal challenge, or the AI legislation now arriving. That is nearly everyone.
Why the old financial risk controls don't cover it
The existing rulebooks were written for machines that behave.
The checks companies already run assume software that gives the same answer every time and changes only when someone schedules it. These systems do neither. So the practical questions go unanswered: where does a control belong, what do you keep as proof, and what do you hand the auditor when they ask.
What a finance function actually needs is narrower and more practical: controls for systems that will not give the same answer twice, expressed in the language your auditor already speaks — not the language of the AI industry. Guidance is arriving quickly from
regulators and standard-setters — faster, in most cases, than finance functions can absorb it,
and none of it is specific to your process. The translation work is what we engage with you on.
Why this practice
The practice maintains its own working implementation of this control stack — an attestation and
obligation-ledger layer that records what a model was asked, what it returned, which sources it
drew on, and who accepted the result. It was built because the advice had to be tested against
something that runs, and because nothing off the shelf produced the evidence the work
required. Specifics are available under NDA.