πŸ›‘οΈ Sector Evidence Hubs:
Sector Evidence Hub: finance.aiacts.app

Finance & Banking AI Statutory Supervision Hub

How is AI regulated in financial services and credit evaluation?

Financial AI applications evaluating creditworthiness or credit score of natural persons fall under Annex III point 5(b) of the EU AI Act, requiring EBA guidelines alignment, SR 11-7 model risk management validation, and auditable refusal mechanisms.

8-Dimension Evidence-Requirement Matrix (Annex III)
01 Model Governance

Creditworthiness & Solvency Model Validation

Model validation logs & credit score risk tier boundaries (Annex III 5(b))

02 Fairness

Protected Class Proxy & Non-Discrimination

Disparate impact audits on credit lending & interest rate decisions

03 Human-in-the-loop

Article 14 Credit Officer Oversight Gateway

Mandatory human approval on credit denials and flagged high-risk loans

04 Transparency

Adverse Action Explainability & Reason Codes

Structured denial reason disclosure (Article 86 & FCRA alignment)

05 Data Governance

Financial Training Data & PII Sanitization

Financial training corpus PII scrub receipts & GDPR Article 6 basis

06 Continuous Monitoring

Macroeconomic & Default Drift Calibration

Quarterly default risk drift and recession stress-testing logs

07 Resilience

DORA Resilience & Algorithmic Cybersecurity

Digital Operational Resilience Act (DORA) ICT model risk audits

08 Evidence Packaging

Immutable Forensic Credit Decision Ledger

Deterministic HDFL cryptographic hash-chain anchoring for all loans

Sector AI Models & Benchmarks (Hugging Face / Open Source)
+ Submit Sector Model β†’

Foundation models, fine-tunes, and specialized architectures classified for this vertical regime.

Google DeepMind Tier 1 GPAI
Gemini 2.5 Pro

Gemini 2.5 Pro surpasses the 10^25 FLOPs threshold, classifying it as a GPAI model with systemic risk under Article 51. Obligations include mandatory model evaluations, adversarial testing, systemic risk assessments, cybersecurity safeguards, and technical documentation for downstream deployers.

View Assessment β†’ Claim Model β†’
Google DeepMind Standard
Gemini 2.5 Flash

Gemini 2.5 Flash operates below the 10^25 FLOPs cumulative computation threshold, classifying as standard General Purpose AI (GPAI). It must maintain technical documentation, comply with EU copyright laws, and supply transparency summaries without systemic risk mitigation burdens.

View Assessment β†’ Claim Model β†’
Google DeepMind Tier 1 GPAI
Gemini 3.7 Flash

Gemini 3.7 Flash includes native support for deterministic human-in-the-loop gating when orchestrated via MCP tool calling, allowing downstream providers to fulfill Article 14 oversight requirements in automated decision workflows.

View Assessment β†’ Claim Model β†’
Audited Sector Training & RAG Datasets (Art. 10)
+ Register Dataset β†’
Art. 10 Provenance Audited
FineWeb (Hugging Face)

undefined

Inspect Dossier β†’ Claim Dataset β†’
Art. 10 Provenance Audited
Common Crawl Corpus

undefined

Inspect Dossier β†’ Claim Dataset β†’
Art. 10 Provenance Audited
The Pile (EleutherAI)

undefined

Inspect Dossier β†’ Claim Dataset β†’
Interactive Sector Spaces & Sandboxes (Art. 57)
Explore All Spaces β†’
⚑ VOS Edge / Workers ⭐ 142
EU AI Act Statutory Explorer

Interactive Article-by-Article statutory explorer, obligations matrix, compliance timeline, and penalty calculator.

Launch Space β†—
⚑ Cloudflare Workers / D1 ⭐ 98
InsureAI Underwriting Sandbox

Live insurance risk sandbox testing protected class proxy discrimination, actuarial fairness, and Article 86 denial explainability.

Launch Space β†—
Designated Statutory Authorities & Regulators
European Banking Authority (EBA) Active
Banking & Credit Model Validation Supervision
European Central Bank (ECB) Active
Prudential Supervision & Internal Model Governance
Federal Reserve / OCC (US) Active
SR 11-7 Model Risk Management Oversight