The flight recorder for your bank's AI or clinical AI — independently verifiable.
Coriqo is the tamper-evident record of the models and AI decisions a regulated institution runs on — inventory, validations, committee sign-offs, lineage, and examiner correspondence in one place. Your examiner checks the chain against a public key, so no one takes your word, or ours. We seal and verify the evidence; we never make the decision. Built for banks whose MRM function is two people and a spreadsheet — big-bank rigor, without the big-bank department.
Selling clinical AI into health systems? The same record answers a hospital AI committee under Joint Commission RUAIH and ONC HTI-1 — see the healthcare page.
Works the way your bank already works — email, calendar invites, and CSV. No new systems for your team to learn, no runtime dependency.
Zero-retention AI. Your data is never used to train models, and no AI output enters the immutable record without a named person's approval.
Buy through your cloud. Coming to AWS and Azure Marketplace — draw down committed cloud spend, lighter vendor onboarding. Listings in review; ask about early access via Private Offer.
Your models are governed in a spreadsheet, a shared drive, and an email thread — until the examiner arrives and asks you to prove what happened, when, and who signed off.
Three layers. Inputs read what you already have. The core records every event. You get the deliverables.
Coriqo reads your bank's existing records into one bank-grade, append-only system of record — then turns that record into what your board and examiner actually ask for: validation trails, committee minutes, examiner packages, findings logs, and a searchable library of the documents behind them. Recorded once, verifiable forever. Deploys in your private cloud or on-premise — air-gapped supported.
Validation & audit
Inventory, lineage, sign-off, examiner packages
Documents & evidence
Central library, cited cross-document search, evidence correlated to models and controls
Ongoing monitoring
Threshold breaches auto-logged as governance events
Board reporting
Quarterly MRM report for the board and audit committee — generated from the record
Model graph
Every model, version, owner, and lineage edge — relationships no single registry holds.
Append-only event log
Every approval, breach, and finding recorded as an append-only event with cryptographic integrity verification (SHA-256) — alter any record after the fact and verification fails immediately.
Merkle attestation
Events sealed into a Merkle tree. O(log n) inclusion proofs let an examiner verify any single event without the full chain.
Identity & policy
Who can view, change, approve, retire — humans, service accounts, time-boxed examiners. Every access logged.
Registries
MLflow · Hugging FaceStorage
S3 · Azure · GCS · NASPipelines
CI/CD · training jobsCloud
AWS · GCP · AzureThe full record — from model to sealed proof — kept by a team of two.
Most of your models are purchased and your team is small. SR 26-2 replaced SR 11-7 in April 2026 and generally excludes banks under $30 billion, so nobody hands you the standard any more: you set it and you defend it. Register every model — vendor or in-house — run it through validation, and record everything in a tamper-evident chain your examiner verifies against a public key, not your word.
A living inventory
Every model and version — vendor and in-house — with owner, risk tier, and lineage. Import your existing MRM spreadsheet via CSV and be current in an afternoon.
A real validation workflow
Draft → review → validated → approved → in production → retired. Independent review is enforced, never the producer — the evidence of effective challenge you're paid to provide.
An exam-ready trail
Every approval, monitoring breach, and examiner finding recorded in an immutable, integrity-verified audit trail. Threshold breaches auto-write a sealed governance event. Generate the examiner package on demand.
Prove it. Independently.
Every event sealed into a Merkle tree. Download a proof bundle. Run one command on your own machine — no network, no Coriqo account. The math either passes or it doesn't.
Most of your models are someone else's. Coriqo governs them anyway.
Two questions the guidance leaves to you. Coriqo makes you answer them on the record.
Both are recorded from the model's own page — the scoping questionnaire, its history, and the interval with the reason behind it. A model nobody has scoped yet says so, rather than defaulting to in scope.
An inventory is only as good as what it leaves out. Coriqo finds the models you didn't know you were running.
Walk a model from submission to an examiner package.
A working prototype with illustrative data. Click through the surfaces you'll use every quarter — the inventory, the validation lifecycle, the version lineage, and the one moment it pays for itself: the examiner package.
| Model | Risk tier | Validation status | Owner | Next review |
|---|
The moment compliance teams care about. Bundle inventory, lineage, and the full access & approval trail for a date range into a single dated document — the kind you hand an examiner.
Your generated examiner package will appear here.
Not a compliance add-on. A case file built around the examiner relationship.
Other tools bolt examination tracking onto generic CRM. Coriqo treats every examination as a tamper-evident case file — the Q&A thread, findings, and remediation trail are all part of the same integrity-verified record as the approval trail.
Every exam gets a case ID and an email alias
EXAM-2026-OCC-CR-001 becomes both a case record and an email address. Examiners reply in their normal client — replies auto-thread into the case. No portal login required on their side.
Every message enters the chain on send
Messages from the examiner, responses from your team, and document submissions are each recorded as governance events. The thread cannot be edited after the fact — the chain breaks if anything is altered.
Findings become tracked governance events
An examiner raises a finding — it writes to the chain with severity, due date, and owner. Remediation closes it. The full lifecycle, from finding to resolution, is in the same tamper-evident record as the approval trail.
Your committee meets like it always has. The record writes itself.
The hardest part of MRM at a smaller bank isn't the work — it's the record-keeping after the work. Coriqo removes it: the tools live inside the email and calendar workflow your committee already uses, and AI does the drafting while people keep every decision.
Invite Coriqo to the meeting
Every committee meeting gets its own email address. Add it to the calendar invite once — the agenda pack goes out before the call, and minutes replied to the thread become a draft decision record. One habit, zero data entry.
Minutes to chained record in minutes
AI reads the minutes and pre-fills the decision — attendees, quorum, votes, dissents, conditions. A person reviews, corrects, and records. Only the human-approved record enters the chain; conditions become tracked findings automatically.
A system that respectfully disagrees
Coriqo continuously cross-checks your own record for contradictions — an approval sitting on an open critical finding, a sign-off after an unresolved breach — and raises the flag with the evidence attached. Accepting or dismissing it, with reasons, is itself a chained event: documented effective challenge, on demand.
The proof behind every decision lives in a hundred PDFs. Coriqo makes it one record you can search — and hand over.
Validation reports, vendor model cards, committee decks, monitoring exports — the evidence behind every model decision arrives as documents, scattered across email and shared drives. Coriqo reads them into one place, ties each one to the model or control it supports, and keeps the whole set answerable.
One document library
Every document your bank uploads in one place, not scattered across email, SharePoint, and a shared drive. Open any one and read it inline.
Ask across every document
Ask a question in plain language and get a short answer with the exact source passage cited — not a guess. Follow the citation straight to the paragraph it came from.
Correlated, then confirmed by a person
Coriqo proposes which model, control, or finding each document is evidence for. A reviewer approves or rejects it in a queue. Nothing counts as evidence until a named person says so.
Coverage you can hand over
See which NIST AI RMF control objectives your confirmed evidence covers, and export a control-indexed pack — each item stamped with who approved it and when. Advisory, not an automated sign-off.
Every other governance tool says "trust us." Coriqo lets you verify.
Certificate Transparency — the append-only log system every browser uses to police TLS certificates — proved that math-based verification scales better than institution-based trust. Coriqo brings the same, well-established audit technique to model governance. Each tier below removes one dependency on trusting Coriqo as an institution.
SR 26-2 leaves generative and agentic AI outside its scope. Your board still has to answer for what they do.
A vendor's generative model is non-deterministic and changes without notice. An AI agent doesn't just score a loan — it can approve it, draft the letter, and file the report. When AI does the work, the examiner's question stops being "explain the model" and becomes "prove what the AI did, in order, and that no one edited the record afterward." That proof is what Coriqo holds. Footnote 3 puts generative and agentic systems outside the guidance and then hands the question straight back: a bank's own risk management and governance practices decide the controls for what the letter does not cover. Coriqo governs them against the AI rulepacks a workspace installs — NIST AI RMF and the EU AI Act — instead of stretching SR 26-2 over systems it says it does not reach. The same tamper-evident record that seals a committee decision now extends to autonomous AI decisions — a flight recorder for AI inside a regulated bank.
Govern agents, not just models
An agent is a governed model whose mandate — what it's allowed to do — is a validated version. Every decision it makes is sealed into the same tamper-evident chain as your committee decisions: the inputs it saw, the tools it called, the evidence it cited, in order and unaltered. The agent inventory rolls it up into a control tower — how many decisions are sealed, and how many ran outside their mandate.
Checked continuously, not once a year
A model that changes weekly can't be validated annually. Grounding checks re-run on a schedule and seal a dated result, so "it stayed grounded" is itself something the examiner can verify. A decision that uses a tool outside its mandate is flagged the moment it happens and opens a finding.
The referee a player can't own
A regulator won't accept an AI that grades its own homework. Coriqo's verifier checks any provider's output against your sealed records — model-agnostic, because the provider is only a label, never part of the verdict. Buy it through your cloud's marketplace if you like; its independence is in what it checks, not who sends the invoice.
Read-only by design
Coriqo observes and records. It never moves artifacts, never sits in your serving path, never becomes a runtime dependency.
SSO, RBAC, examiner tokens
OIDC for humans, scoped keys for pipelines, and time-boxed read-only access for examiners — every access itself logged.
Runs in your environment
Kubernetes-native and built for air-gapped and on-prem deployment where regulated workloads require it.
Append-only audit trail
Every state change is an append-only event with cryptographic integrity verification. Any after-the-fact alteration is detected immediately — no tamper goes unnoticed.
Verify without trusting us
Merkle inclusion proofs. Ed25519 signed checkpoints. A public key is all an examiner needs to verify the chain on their own machine. No server, no Coriqo account.
We're working with a small number of community and mid-size banks — and now clinical AI vendors — to shape v1.
If you own models at a bank — as the MRM officer, risk manager, or whoever the exam letter lands on — we want your next exam to be one click, not one quarter. If you sell clinical AI into health systems, we want the same for the governance review that keeps parking your deals. Design partners get direct input and early access, in exchange for telling us what we've got wrong. Validation consultants who serve either segment are welcome too.
No forms. Email us directly and we'll respond within one business day.
Send us an emailor copy: abdul@coriqo.io