Fintech risk management rule

Algorithm governance, monitoring and explainability in fintech

When it relates

Financial technology service entities: digital lending, neobanks, personal finance and advice.

What the rule provides

• The risk committee approves and keeps algorithms and automated models up to date and reviews their monitoring.
• The risk unit checks traceability, explainability and updates of algorithms and issues technical reports.
• Include incidents involving algorithms in the operational risk event database.

Typical evidence

• Committee minutes, explainability reports and incident database

Related base documents

• Model Risk Management Policy and Model Inventory
• Model Explainability (XAI) Procedure

Supporting documents

• Model Monitoring Report
• AI Incident Response Plan

Verification

Verified in the official source on November 4, 2026Checked against the Codification published by the Superintendency of Banks (book I, title IX, chapter XII): art. 8 (the committee approves and updates algorithms and models and reviews their monitoring), art. 10 (the risk unit includes them in the risk matrix) and art. 15 (incident database that includes algorithm use). Issued Sep 25, 2025 and published in Official Register No. 155 on Oct 30, 2025, per the Superintendency's history.