Virgin Money: AI blocked its own brand name
The bank's moderation system treated the word "virgin" as profanity and blocked customer data - including account names. The model failed to understand the context of its own brand.
SAG is an independent real-time oversight layer for customer-facing AI agents in financial services - in voice and text. It checks every message before the customer sees or hears it, so institutions protect their brand, keep the agent within their own policies and take care of every customer - with regulatory requirements covered as standard.
Every LLM-based system fabricates facts, responds inconsistently, and can be manipulated. And the oversight most institutions rely on - logs, sampling, manual QA review - cannot keep up with conversation volume: the rest ships unreviewed. Under UK SMCR and PRA SS1/23, senior managers can be held personally liable for AI failures - and without an independent control layer you cannot prove to a regulator what your AI said, or didn't say - nor be confident in the quality and safety of what it is telling customers right now.
The bank's moderation system treated the word "virgin" as profanity and blocked customer data - including account names. The model failed to understand the context of its own brand.
A customer asked the in-app bot why her savings rate had halved. It kept repeating the headline 5% - and when she asked for a person, it replied that it “must be broken”. The brand takes the hit; the customer is left without help. Source: Yahoo Finance Australia.
Independent audits found bank chatbots systematically fail to serve elderly users, immigrants, and people with disabilities - exposing institutions to fair-treatment and FCA Consumer Duty action.
The controls most institutions rely on today were designed for human-sized volumes. Customer-facing AI outgrows them in weeks.
Your second line reviews a small sample of conversations, days after they happened. Everything else ships unreviewed.
Dashboards and logs describe what your AI already said - after the customer saw it. That is reporting, not control.
Every new AI use case widens the gap between what your AI says and what anyone checks. Hiring more reviewers doesn't close it.
SAG closes the gap: 100% of dialogues checked in real time - your team reviews only the flagged fraction.
SAG gives the teams that own AI a working oversight layer out of the box - so you spend your time on customer experience, not on building control tooling.
You run the bot and answer for what it says. From day one SAG catches the wrong answer before the customer sees it and counts what it saves you in refunds and review hours - freeing your team to build customer experience, not oversight tooling.
Six families of checks on every dialogue from day one, automated judges calibrated against your own reviewers, and committee-ready evidence packs - a working operating framework, not another policy document.
An independent second pair of eyes over every conversation, a full audit trail, and examiner-ready reports from day one - a compensating control that supports your effective-challenge and independence expectations (SR 26-2, PRA SS1/23, FCA Consumer Duty), and the confidence to approve the next AI rollout.
Security, MRM, and platform teams plug in via REST / gRPC / MCP.
Most of the market checks text, after the fact - and an internal oversight build takes years your roadmap doesn't have. SAG scores every message in real time, in voice and text, with ready-made rule packs for your own policies and the regulation you operate under - so your team builds customer experience, not control tooling.
Every message is scored before the customer sees or hears it - in chat, and on the live stream of recognised speech in voice. Most of the market checks text, after the fact: of ~80 vendors we reviewed, about 25 touch voice at all - mostly after the call.
Cloud competitors require sending conversations to the vendor; in-house builds learn only from one institution's incidents. With federated learning, the shared check model improves with every partner - and your data never leaves your perimeter.
Your own policies, brand and tone codified as checks, plus pre-built packs for EU AI Act, DORA, FCA Consumer Duty, PRA SS1/23, MAS and ESMA - with audit trail and reporting as standard. On-prem or in your cloud; your team builds customer experience, not controls.
The major security and cloud platforms sell AI safety through the same channels as the AI infrastructure they monitor. SAG is an independent third party - the monitor is independent of the platform it evaluates, which supports your effective-challenge and independence expectations (SR 26-2 “sufficient independence”, PRA SS1/23, FCA Consumer Duty). The four-eyes principle your regulator applies to people - applied to your AI.
SAG sits between your customers and your AI agent and scores every message in real time - in chat, and on the live stream of recognised speech in voice. Integrates with any AI agent platform via REST / gRPC / MCP. Deployable in your cloud or on-premise.
Detects personal data (passport, card, account numbers), prompt-injection and jailbreak attempts before they reach the model - and returns a score your platform acts on.
Validates every response for accuracy, brand compliance, and regulatory boundaries before it reaches the customer.
Scores every conversation independently - task completion, relevance, contextual accuracy - and flags model drift before your regulator does.
Every dialogue is checked in real time across quality, hallucinations, tone and brand, your internal policies, regulatory rules, and PII - coverage no manual process can reach.
Flagged conversations land in an escalation queue for your reviewers with full context, and our automated judges are calibrated against your own review team - human oversight built in, not bolted on. It is the pattern regulators reward.
Monitoring and eval tools tell you a bad answer shipped. SAG scores every inbound and outbound message inline - in chat and in voice - and returns the score before the customer sees or hears the answer, so your platform can send it, rephrase it or hand the customer to a person. Most of the market checks text, after the fact. Of ~80 vendors we reviewed, about 25 touch voice at all - mostly after the call.
SAG sits between your customers and your AI agent and scores every message in real time. What it is built for - at whatever conversation volume you generate:
Customer experience, product, and the AI use cases that move the needle for your business.
Continuous monitoring, hallucination detection, PII / PCI containment, adversarial-input controls, audit-trail generation, independent quality scoring, an escalation workflow for your reviewers, and committee-ready evidence packs.
Your team connects through the supplied SDK. No agent retraining required. Works alongside any AI-agent platform, any LLM provider.
A dedicated tenancy in your own cloud, or your own data centre. Customer data never leaves your perimeter - by architecture, not by configuration.
You start with a model trained on the collective experience of the industry network. Data sovereignty preserved by design.
Your checks start with your brand, your policies and your customers - and the regulatory side comes covered as standard: ready-made rule packs for the jurisdictions you operate in, a full audit trail and reporting. EU AI Act transparency obligations apply from 2 August 2026; Annex III high-risk obligations from 2 December 2027, with fines up to €15M or 3% of global turnover (whichever is higher).
| Jurisdiction | Law / standard | Requirement | Status |
|---|---|---|---|
| EU | EU AI Act Art. 72 + DORA | Mandatory continuous AI monitoring. Fines up to €15M or 3% of global turnover, whichever is higher. | Art. 50: 2 Aug 2026 · Annex III: 2 Dec 2027 |
| UK | PRA SS1/23 + FCA Consumer Duty + SMCR | Mandatory monitoring & independent model validation; personal liability for senior managers. | In effect |
| US | SR 26-2 + FS AI RMF (230 controls) | SR 26-2 (Apr 2026, replaced SR 11-7) takes GenAI out of model-risk scope - banks design their own controls; state-level requirements rolling out from 2026. | In effect |
| Turkey | AI Bill (TBMM) + KVKK Agentic AI Guidance + SPK FinTech AI/ML inspections | Comprehensive AI law pending in parliament; KVKK published agentic-AI guidance (Apr 2026); SPK on-site FinTech AI/ML inspections active under 2022–2026 strategic plan; BDDK "security by design" extends to AI. | Pending |
| Singapore | MAS AI Risk Management | Mandatory governance and monitoring for high-risk AI systems. | Expected 2026 |
| Hong Kong | SFC AI Circular | Mandatory continuous monitoring for licensed firms using generative AI. | In effect |
| Brazil | Marco Legal da IA (PL 2338/2023) + BCB Resolução 318/2023 | Risk-tier AI law Senate-approved Dec 2024, pending Chamber of Deputies; BCB cyber + operational resilience extends to AI; CVM AI guidance active. | Pending |
| Latin America | Banxico + Chile CMF + Colombia SFC + Argentina BCRA | National AI policies (Chile AI Bill, Colombia CONPES 3975, Mexico National AI Strategy, Argentina ARGENIA); sector regulators developing AI supervisory expectations. | Developing |
| Kazakhstan | AI Concept 2024–2029 + NBK/ARDFM + AIFC AFSA | AI Concept 2024–2029 approved; NBK/ARDFM developing AI supervisory expectations; AIFC parallel English-common-law jurisdiction with AFSA AI guidance; data localisation required. | Active strategy |
| Uzbekistan | AI Development Concept 2030 + CBU regulations | AI Development Concept approved 2024; CBU developing AI supervisory expectations for banking; data localisation required (2021 amendments). | Active strategy |
| Armenia | CBA banking IT regulations + AI Development Concept Note + Digital Transformation Strategy | CBA principles-based banking AI supervision (developing); AI Development Concept Note + Digital Transformation Strategy; EAEU regional regulatory overlay. | Developing |
| Georgia | NBG operational risk + IT regulations + Open Banking standards + Digital Georgia Strategy | NBG Open Banking + IT regulations active; Digital Georgia Strategy; EU candidate status (Dec 2023) drives EU AI Act alignment trajectory. | Developing |
The quality of any AI oversight system depends on the diversity of data it has seen. Banks face a fundamental contradiction: to improve detection you need data from many institutions; to comply with the law that data cannot leave your perimeter. SAG eliminates the trade-off with Federated Learning.
| Cloud guardrails big-tech & platform vendors |
In-house build | AI Safeguard | |
|---|---|---|---|
| Customer data stays inside the bank | No - sent to vendor | Yes | Yes |
| Learns from incidents at other banks | Yes - but your data leaves | No - only your own incidents | Yes - without data exchange |
| Scales beyond manual review capacity | Partial - generic checks at volume | No - review team grows with volume | Yes - 100% of dialogues in real time |
| Independent of the platform it evaluates (effective challenge - SR 26-2, PRA SS1/23) | No - bundled with AI infra | No - self-validation | Yes - independent third party |
| GDPR + GLBA + DPA 2018 simultaneously | Pick one jurisdiction | Yes - if you build for all three | Yes - by architecture |
| Time-to-value | Weeks - pending data-export approval | Years of engineering | Days - model pre-trained on network |
Classification checks targeting under 100 ms (MVP target); LLM checks in 0.5–1.5 s within your response budget. Works with any AI agent platform and any LLM provider - no vendor lock-in.
Full on-premise installation in your data centre, or private-cloud deployment in your own cloud tenant - for the most regulated workloads. Managed-cloud option also available. Data, models, and audit logs never leave your perimeter.
EU AI Act · DORA · FCA Consumer Duty · PRA SS1/23 · MAS · ESMA - pre-built, regulator-ready.
We are building SAG together with financial institutions that run customer-facing AI agents. Become a design partner: your scenarios shape the checks, and your own policies become rule packs. Regulation comes covered as standard - EU AI Act transparency obligations apply from 2 August 2026; Annex III high-risk obligations from 2 December 2027.