AI governance readiness scorecard

How would your AI governance hold up to a regulator's questions?

Eighteen questions, about five minutes, scored in your browser. Built for trading and investment firms, and updated for MAS's final AI Risk Management Guidelines (7 October 2026) and the EU AI Act timeline as amended in July 2026.

A readiness score across the six pillars supervisors ask about, from the AI register to generative AI policy.
Which pillars are solid, which need watching and which are a priority, with the first practical step for each.
Three quick wins drawn from your own answers, in a report you can share with your board, risk or compliance team.

For COOs, heads of risk and compliance, CTOs and founders. Your answers stay in your browser unless you request the report.

About your firm

Two questions first

So the report cites only the regulators that apply to you.

Pillar 1 of 6

AI inventory & risk tiering

Pick the option closest to how things are today, not how they're meant to be.

Your readiness score: Developing

The full report shows how each of the six pillars scores, why it matters, and the first step for each.

Get your full gap report

The report covers all six pillars: what good looks like, the first step for each, and three quick wins drawn from your answers. It appears on this page as soon as you send the form, and we keep your answers on file so that a call, if you want one, starts from where you are.

First name

Work email

Firm

Role

We record these details with your answers and scores. No mailing list. Privacy notice.

Everything you share stays confidential.

Score by pillar

Your gap report

Where to start

Three quick wins from your answers

Want a second pair of eyes on this?

A 30-minute call is enough to see whether we can help turn the priorities above into a plan your risk, compliance and engineering teams agree on. No preparation needed.

Book a 30-minute call Or email

What this scorecard measures against

Monetary Authority of Singapore, Guidelines on Artificial Intelligence Risk Management, issued 7 October 2026; oversight, risk-management and policy expectations apply from 7 October 2027, life-cycle controls and capability expectations from 7 October 2028.
EU AI Act (Regulation (EU) 2024/1689) as amended by the Digital Omnibus on AI (Regulation (EU) 2026/1744): AI literacy and prohibited-practice provisions in force since 2 February 2025, general-purpose AI obligations since 2 August 2025, Annex III high-risk obligations from 2 December 2027.
Prudential Regulation Authority SS1/23, Model risk management principles for banks, and Federal Reserve/OCC SR 11-7, used here as the benchmark for validation, documentation and change control.
FCA: no AI-specific rulebook; SM&CR accountability, SYSC systems and controls and the Consumer Duty apply, with responsible AI adoption a stated supervisory priority for 2026.
SFC circular to licensed corporations on the use of generative AI language models (12 November 2024), effective immediately.
DORA (Regulation (EU) 2022/2554), applicable since 17 January 2025, for ICT third-party risk including AI vendors.
UK and EU GDPR for personal data in model inputs and outputs.

This scorecard is a self-assessment, not legal or regulatory advice. Sage Edge works alongside your legal and compliance advisers, not in place of them.