Harborstone National Bank

Retail & commercial banking

Priya N.

Chief Compliance Officer

Your compliance records

Scored on your own records

The score is calculated from your own controls, policies and audits. Sample records are kept as examples and are not counted.

your score

50% of the score — weighted test results

Your controls

HN-DL-01 · End-to-end feature lineage recorded

Passing

Data Lineage · weight 1.5 · Consumer Credit Scoring v4 · Data Lineage & Quality Policy · last tested 2026-08-05

HN-DL-02 · Training data retention and provenance checks

Partial

Data Lineage · weight 1 · Card Fraud Detection Engine · Data Lineage & Quality Policy · last tested 2026-06-18

HN-DL-03 · Data quality thresholds monitored daily

Passing

Data Lineage · weight 1 · AML Transaction Monitoring Assist · Data Lineage & Quality Policy · last tested 2026-09-01

HN-EX-01 · Adverse action reason codes generated

Passing

Explainability · weight 1.5 · Consumer Credit Scoring v4 · Fair Lending & Model Fairness Policy · last tested 2026-07-28

HN-EX-02 · Customer-facing explanation review

Passing

Explainability · weight 1 · Branch Servicing Assistant (LLM) · Fair Lending & Model Fairness Policy · last tested 2026-09-13

HN-FA-01 · Disparate impact testing by protected class

Failing

Fairness · weight 1.5 · Consumer Credit Scoring v4 · Fair Lending & Model Fairness Policy · last tested 2026-06-30

HN-FA-02 · Proxy variable screening in features

Partial

Fairness · weight 1 · Collections Propensity Model · Fair Lending & Model Fairness Policy · last tested 2026-05-22

HN-FA-03 · Fairness metrics tracked post-deployment

Not tested

Fairness · weight 1 · Marketing Next-Best-Offer · Fair Lending & Model Fairness Policy · last tested never

HN-MR-01 · Independent model validation before release

Passing

Model Risk · weight 1.5 · Consumer Credit Scoring v4 · Model Risk Management Standard · last tested 2026-07-14

HN-MR-02 · Annual revalidation of production models

Partial

Model Risk · weight 1.5 · Card Fraud Detection Engine · Model Risk Management Standard · last tested 2026-05-02

HN-MR-03 · Model inventory completeness reconciliation

Passing

Model Risk · weight 1 · AML Transaction Monitoring Assist · Model Risk Management Standard · last tested 2026-08-20

HN-MR-04 · Documented model assumptions and limitations

Failing

Model Risk · weight 1 · Collections Propensity Model · Model Risk Management Standard · last tested 2026-04-11

HN-RS-01 · Kill switch tested each quarter

Passing

Resilience · weight 1.5 · Card Fraud Detection Engine · Model Change & Resilience Procedure · last tested 2026-08-12

HN-RS-02 · Fallback rules engine available

Passing

Resilience · weight 1 · AML Transaction Monitoring Assist · Model Change & Resilience Procedure · last tested 2026-07-03

HN-RS-03 · Change approval with rollback plan

Partial

Resilience · weight 1 · Consumer Credit Scoring v4 · Model Change & Resilience Procedure · last tested 2026-03-30

HN-SC-01 · Least privilege access to model endpoints

Passing

Security · weight 1.5 · Branch Servicing Assistant (LLM) · AI Security & Access Control Standard · last tested 2026-08-27

HN-SC-02 · Prompt injection and output filtering tests

Failing

Security · weight 1 · Branch Servicing Assistant (LLM) · AI Security & Access Control Standard · last tested 2026-06-09

HN-TP-01 · Vendor model due diligence refresh

Partial

Third Party · weight 1 · Marketing Next-Best-Offer · Third Party AI Vendor Policy · last tested 2026-09-13

Sample controls · not counted

DL-01 · Training data source registry

PassingSample

Data Lineage · weight 3 · Credit Risk Scoring v4 · BCBS 239 Data Lineage & Provenance Policy · last tested 2026-08-30

DL-02 · Feature lineage freshness

FailingSample

Data Lineage · weight 2 · Fraud Detection Net · BCBS 239 Data Lineage & Provenance Policy · last tested 2026-08-05

DL-03 · PII minimisation review

PassingSample

Data Lineage · weight 2 · Customer Sentiment LLM · BCBS 239 Data Lineage & Provenance Policy · last tested 2026-09-01

EX-01 · Reason codes for adverse decisions

PartialSample

Explainability · weight 3 · Credit Risk Scoring v4 · ECOA / Reg B Adverse Action Explainability Policy · last tested 2026-07-18

EX-02 · Model card published

FailingSample

Explainability · weight 2 · Customer Sentiment LLM · ECOA / Reg B Adverse Action Explainability Policy · last tested 2026-08-22

EX-03 · Customer-facing disclosure copy

Not testedSample

Explainability · weight 1 · Collections Outreach Agent · ECOA / Reg B Adverse Action Explainability Policy · last tested never

FA-01 · Group fairness testing

FailingSample

Fairness · weight 3 · Credit Risk Scoring v4 · SR 11-7 Model Risk Management Standard · last tested 2026-08-14

FA-02 · Proxy variable screening

PartialSample

Fairness · weight 2 · Collections Outreach Agent · SR 11-7 Model Risk Management Standard · last tested 2026-08-01

MR-01 · Independent model validation

PassingSample

Model Risk · weight 3 · Credit Risk Scoring v4 · SR 11-7 Model Risk Management Standard · last tested 2026-08-12

MR-02 · Challenger model benchmarking

PassingSample

Model Risk · weight 2 · Credit Risk Scoring v4 · SR 11-7 Model Risk Management Standard · last tested 2026-08-20

MR-03 · Performance monitoring thresholds

PartialSample

Model Risk · weight 2 · Fraud Detection Net · SR 11-7 Model Risk Management Standard · last tested 2026-07-02

MR-04 · Annual revalidation sign-off

Not testedSample

Model Risk · weight 2 · Collections Outreach Agent · SR 11-7 Model Risk Management Standard · last tested never

RS-01 · Kill-switch drill executed

PassingSample

Resilience · weight 3 · Fraud Detection Net · FFIEC AI Incident Response Runbook · last tested 2026-09-05

RS-02 · Rollback plan rehearsed

PassingSample

Resilience · weight 2 · Credit Risk Scoring v4 · FFIEC AI Incident Response Runbook · last tested 2026-08-28

RS-03 · Incident post-mortem within 5 days

FailingSample

Resilience · weight 1 · Wealth Robo-Advisory Pilot · FFIEC AI Incident Response Runbook · last tested 2026-08-19

SC-01 · Prompt injection test suite

PassingSample

Security · weight 2 · Customer Sentiment LLM · FFIEC AI Incident Response Runbook · last tested 2026-09-02

SC-02 · Access review for model endpoints

PassingSample

Security · weight 2 · Fraud Detection Net · FFIEC AI Incident Response Runbook · last tested 2026-08-27

SC-03 · Secrets rotation for agent keys

PartialSample

Security · weight 1 · Collections Outreach Agent · FFIEC AI Incident Response Runbook · last tested 2026-07-30

TP-01 · Vendor model due diligence

PartialSample

Third Party · weight 2 · Wealth Robo-Advisory Pilot · OCC 2013-29 Third-Party Model Assurance · last tested 2026-06-11

TP-02 · Contractual audit rights

PassingSample

Third Party · weight 1 · Customer Sentiment LLM · OCC 2013-29 Third-Party Model Assurance · last tested 2026-07-25