What is a suptech vendor?

A suptech vendor is a company that provides supervisory technology solutions to financial regulators, central banks, and supervisory authorities. Suptech vendors like CRT help regulators automate oversight processes, improve risk detection, and enhance the efficiency of financial supervision through AI and data analytics.

What is CORA AI Suptech Platform?

CORA AI Suptech Platform (Compliance Oversight Regulatory Analytics) is the leading AI-powered suptech vendor solution developed by CRT. It provides financial supervisors with automated regulatory reporting, real-time AI risk assessment, licensing management, and early warning systems. CORA AI Suptech Platform is trusted by 10 public institutions across 20 jurisdictions on 3 continents as the premier suptech vendor solution.

Who uses suptech solutions?

Suptech solutions are used by central banks, financial regulators, insurance supervisors, and prudential authorities worldwide. These organizations use suptech to modernize supervision, automate compliance monitoring, and leverage AI for proactive risk identification.

What are the benefits of using CORA AI Suptech Platform?

CORA AI Suptech Platform helps regulators reduce manual work by up to 30%, detect risks 50% faster, enable 24/7 continuous monitoring, unify data governance across licensing, reporting and risk management, and implement AI-powered early warning systems for proactive supervision. As a leading suptech vendor, CRT delivers proven results for central banks globally.

Which suptech vendor technology powered the BSP Philippines Data Management Award?

CRT's CORA AI Suptech Platform powered the BSP Philippines API-XML project that won the Central Banking 'Best Global Data Management Initiative 2019' award. As the suptech vendor behind this award-winning implementation, CRT delivered automated prudential reporting and data management solutions for Bangko Sentral ng Pilipinas.

How does CORA AI Suptech Platform handle data sovereignty?

CORA AI Suptech Platform uses the Glass Box AI approach for complete data sovereignty. Unlike black-box AI systems, Glass Box AI can be deployed entirely on-premise within the regulator's infrastructure, ensuring sensitive supervisory data never leaves their jurisdiction. This sovereign AI architecture complies with EU AI Act requirements and gives central banks full control over their AI models and data.

What is the Execution Gap in financial supervision?

The Execution Gap is the critical disconnect between reactive supervision (responding to problems after they occur) and proactive supervision (identifying and preventing issues before they materialize). CORA AI Suptech Platform bridges this gap by providing AI-powered early warning systems, predictive analytics, and real-time risk monitoring that enable regulators to shift from reactive to proactive supervision.

Which public institutions use CORA AI Suptech Platform?

CORA AI Suptech Platform is trusted by 10 public institutions across 20 jurisdictions on 3 continents, including HANFA (Croatia), AZN (Slovenia), ASO (North Macedonia), ANO and SCMN (Montenegro), BSP — Bangko Sentral ng Pilipinas (Philippines), the Insurance Commission of the Philippines, the Ministry of Finance of Montenegro, the European Commission, and CIMA Zone — the Conférence Interafricaine des Marchés d'Assurances, the supranational insurance supervisor for 14 African nations (Benin, Burkina Faso, Cameroon, Central African Republic, Chad, Congo, Côte d'Ivoire, Equatorial Guinea, Gabon, Guinea-Bissau, Mali, Niger, Senegal, Togo).

What is Glass Box AI and how does it differ from black-box AI?

Glass Box AI is CRT's approach to explainable artificial intelligence built into CORA AI Suptech Platform. Unlike black-box AI systems where decision logic is opaque, Glass Box AI provides complete reasoning trails, full auditability, and transparent decision paths for every AI-generated output. This means financial regulators can trace exactly how and why the AI reached a specific risk assessment, compliance finding, or early warning signal — a critical requirement for supervisory accountability and EU AI Act compliance.

What is the Cognitive Supervisory Engine in CORA?

The Cognitive Supervisory Engine is CORA's Tier 4 AI-powered module that provides advanced cognitive capabilities for financial supervision. It includes agentic AI validation, automated Basel III ICAAP and Solvency II ORSA assessments, predictive risk analytics, natural language processing for regulatory documents, and multi-framework compliance analysis. The engine learns from supervisory patterns while maintaining Glass Box AI transparency.

What deployment options does CORA AI Suptech Platform offer?

CORA AI Suptech Platform offers fully sovereign, on-premise deployment within the regulator's own infrastructure — ensuring zero cloud dependency and complete data sovereignty. This means sensitive supervisory data never leaves the jurisdiction. CRT also offers the AI Factory Sovereign program, which provides dedicated NVIDIA H200 GPU infrastructure for regulators who need sovereign AI processing capabilities with up to 8-year hardware warranty and 24/7 managed services.

What is AI Factory Sovereign by CRT?

AI Factory Sovereign is CRT's dedicated AI infrastructure program that provides central banks and regulators with sovereign, on-premise NVIDIA H200 GPU hardware for running CORA's AI models. It includes full hardware provisioning, 3-6 month deployment timeline, 24/7 managed services, and up to 8-year warranty. This ensures regulators maintain complete control over their AI infrastructure without relying on third-party cloud providers.

What is the 4-tier architecture of CORA AI Suptech Platform?

CORA AI Suptech Platform uses a progressive 4-tier architecture: Tier 1 (Core Regulatory Functions) covers licensing, reporting, and compliance management. Tier 2 (Process Automation) adds workflow automation and document processing. Tier 3 (Data Governance & BI) provides enterprise data management, analytics dashboards, and business intelligence. Tier 4 (AI Cognitive Engine) delivers the full Cognitive Supervisory Engine with Glass Box AI, predictive analytics, and automated risk assessments. Regulators can adopt tiers progressively based on their maturity level.

Is CORA AI Suptech Platform compliant with the EU AI Act?

Yes, CORA AI Suptech Platform is designed for EU AI Act compliance. Its Glass Box AI architecture provides the transparency, explainability, and auditability required by the regulation. Every AI-generated decision includes a full reasoning trail, enabling regulators to meet the EU AI Act's requirements for high-risk AI systems used in financial supervision. CRT also holds ISO 27001:2022 certification for information security management.

Does CRT offer training and implementation support for CORA?

Yes, CRT provides comprehensive training and implementation support as part of CORA AI Suptech Platform deployment. This includes on-site and remote training programs, dedicated implementation teams, change management support, and ongoing technical assistance. CRT's ISO 20000-1:2018 certification for IT service management ensures structured, high-quality support throughout the implementation lifecycle and beyond.

What is CORA Tier 4 Cognitive?

CORA Tier 4 is the sovereign AI cognitive engine of the CORA AI Suptech Platform by CRT. It delivers Glass-Box AI that reads a full ICAAP or ORSA package, applies regulatory frameworks, reasons across 12 dimensions, and produces a defensible rating — reducing months of manual review to days.

How does Glass-Box AI differ from black-box AI?

Glass-Box AI in CORA Tier 4 provides full explainability. Every risk judgment includes source citations from the original submission, every reasoning step is traced, and every score can be audited. Supervisors can see exactly how the AI reached its conclusion, unlike opaque black-box models.

What are the hardware requirements for Tier 4?

CORA Tier 4 requires NVIDIA GPU infrastructure (A100, L40S, or H200) for running the Nemotron-3-Nano 30B language model via the Ollama runtime. It deploys on Ubuntu 24.04 LTS with zero cloud dependencies and supports fully air-gapped operation.

How many ICAPs can CORA Tier 4 process?

In production deployments, CORA Tier 4 has processed 25 ICAPs in 6 days, with the AI flagging 4 out of 12 dimensions on average for supervisory attention. Each assessment includes Glass-Box citations for full traceability.

What is the CORA Supervisory Cockpit?

The Supervisory Cockpit is Tier 4's persistent operating environment: intake triage, background screening, fit and proper decision support, multi-regulator segregation, and market-conduct analysis run side by side on one screen. Every AI run is logged with its evaluated metrics, every finding is grounded in a verbatim statutory citation, and the system prompt behind every workflow is open for supervisors to read and edit.

How does CORA prevent hallucinated legal citations?

Through the Citation Guardrail. Statutes are indexed one subsection per passage, hybrid retrieval surfaces only real passages from the regulator's own corpus, and every finding carries the retrieved passage's own citation label — never text written by the model. A finding the corpus cannot support is marked NO_GROUNDING, its confidence is halved, and it is routed to human review. A hallucinated citation isn't caught by review — it's prevented by architecture.

Can supervisors edit the AI's instructions in CORA?

Yes. CORA Tier 4 exposes an editable prompt registry: supervisors can open, read, and edit the system prompt behind every AI workflow. Advisory outputs pass a confirm-or-override gate, and the recorded value is always the analyst's — the AI works for the supervisor, on the supervisor's instructions.

Tier 04 · Cognitive

ICAAP & ORSA, in days.

Glass-Box AI that reads a full ICAAP package, applies regulatory frameworks, reasons across 12 dimensions, and produces a defensible rating — inside a cockpit where every case, citation and judgment lives on one screen.

ICAAP assessment · Regional Bank 07LIVE

25ICAPs assessed

4/12Dims flagged

100%Glass-Box

Risk trend — 12 months

EntityAssessorStatus

AZN — ORSA Q1M. NovakFlagged

HANFA — Solvency III. KovačOn track

BSP — Risk MatrixM. SantosReady

100%

Every AI run logged

Model-written citations

Every citation copied verbatim from law

3-layer

Human override on every decision

On-prem

Zero data egress

The Supervisory Cockpit

One screen. Every case. Every citation.

A sovereign, real-time AI cockpit where intake triage, background screening, fit-&-proper decisions and market-conduct analysis run side by side — every AI finding grounded in a verbatim statutory citation, every run logged, every prompt visible.

See the cockpit How grounding works ↓

CORA · Supervisory CockpitLive

142Runs today

96%Grounded

6Flagged

Licensing triage · APP-2026-0412RISK: MEDIUM

Beneficial-owner threshold requires enhanced due diligence.

Banking Act · s.14(3) — verbatim

Source of funds narrative incomplete.

NO_GROUNDING confidence halved · human review

Self-sufficient

Runs entirely on the regulator's own infrastructure — local LLM inference, local embeddings, local retrieval corpus. No cloud, no API keys, no data egress.

Intelligent

Not a viewer — an analyst. The cockpit triages cases, screens adverse media, drafts fit-&-proper determinations and classifies conduct risk, each with confidence scores and human confirm/override gates.

Real-time & accountable

A live “Recent runs & metrics” panel shows every AI run — UI- or API-triggered — with its evaluated metrics. Glass Box is not a slogan; it is a panel on the landing page.

Eight capability blocks

Not a dashboard. An operating environment.

Each block maps 1:1 to a working cockpit service.

Intelligent Case Triage & Routing

Drop a licence-application export → risk tier + routing + findings, every finding citing an exact statutory provision copied verbatim, never invented.

/cockpit/licensing

Adverse Media & Background Screening

Automated adverse-media entity linkage + AI-assisted review with a supervisor-configurable threshold slider.

/cockpit/screening

Fit & Proper Decision Support

Per-regulator determinations; the deterministic screening layer stays instant while the AI writes the narrative.

/cockpit/fit-proper

Multi-Regulator Segregation

One subject, two regulator-scoped assessments with attribute-based access control — a scoped view can never expose the other regulator's data. Twin Peaks-ready.

/cockpit/multi-regulator

Market Conduct AI (advisory)

Three-layer governance: AI suggests, analyst confirms or overrides, the recorded value is the analyst's.

/cockpit/mcs-conduct-ai

Ask-the-Corpus Assistant

A grounded natural-language assistant that answers “why was this entity flagged?” using the corpus plus the current page's result.

RAG chat · every page

Source Finder

Type a query, see the exact retrieved passages — retrieval transparency as a first-class feature.

/cockpit/sources

Supervisor-owned AI

Supervisors can open, read and edit the system prompt behind every AI workflow — “the AI works for you, on your instructions.”

Editable prompt registry

Capabilities

What’s included in Tier 4

RAG-augmented reading

Retrieval-augmented generation ingests the full regulatory submission, parses every page, and grounds every AI judgment in the institution's actual data with cited source paragraphs.

12-dimension reasoning

Multi-framework scoring engine analyses risk across credit, market, operational, liquidity, and eight additional dimensions. Each score includes a structured rationale and evidence chain.

Glass-Box explainability

Every risk judgment is fully traceable. Source citations, reasoning chains, prompt audit trails, and human-in-the-loop gates at every stage. No black boxes in supervisory decisions.

Traceability isn't a policy here — it's enforced by the pipeline itself. ↓

The differentiating technical story

The Citation Guardrail

A citation is a property of a retrieved document, never model text. A finding the corpus cannot support is structurally impossible to cite.

Step 01
Section-level indexing
Each statute is chunked one subsection per passage; the citation label (act · section · subsection) is composed from the document's own metadata.
Step 02
Hybrid retrieval
Dense + keyword retrieval surfaces only real passages from the regulator's own corpus — the model may reference nothing else.
Step 03
Grounded generation
The finding is written against retrieved passages; every claim carries the passage's own citation label — not one written by the AI.
Step 04 · Guardrail
Citation guardrail
Unsupportable finding → marked, confidence halved, routed to human review.
NO_GROUNDING

A hallucinated legal citation isn’t caught by review — it’s prevented by architecture.

Assessment lifecycle

25 banks, one ICAAP pipeline

1
Batch ingestion
25 submissions parsed — structured data + narrative, OCR

2
12-dimension risk scoring
RAG-augmented, explainable — flags qualitative weakness

3
Supervisory review board
Multi-assessor review · human sign-off on every rating

4
Assessment report
Composite rating + intervention ladder + full audit trail

Time compression — canonical claim

Day in the life

How Tier 4 transforms daily work

Anna Kowalska

Head of prudential supervision

“An ICAAP assessment that consumed our team for three months now produces a preliminary supervisory report in two days. The AI reads every page, and I can trace every risk score back to the source paragraph.”

9:00 AM — Cockpit triage

Opens the Cockpit. Overnight triage has already routed three intakes and flagged one NO_GROUNDING finding for human review.

11:00 AM — Dimension review

The 12-dimension scoring run for the pending ICAAP is on screen, every judgment carrying its source citation.

2:00 PM — Corpus chat

Asks the corpus chat a follow-up — “why was this entity flagged?” — and gets an answer grounded in law plus the result on screen, ready for the board pack.

4:00 PM — Review board

Review board convenes. The evidence chain — findings, citations, overrides, prompts — exports straight from the Cockpit.

Outcome

Full ICAAP supervisory assessment completed in days instead of months, with 100% explainable AI and complete audit trail for every risk judgment. And between assessments, nothing goes dark — the Cockpit keeps triaging, screening and logging every day in between.

Outcomes

Measurable impact from day one

25 ICAPs / 6 daysAssessment throughput

4/12 DimsFlagged on average

Glass-BoxCitations

Architecture

Where Tier 4 sits

DataTier 1

PlatformTier 2

AppsTier 3

CognitiveTier 4

Use cases in action

See Tier 4 at work

Risk Assessment (ICAAP/ORSA)End-to-end AI assessment

Complaints HandlingAI-powered triage & analysis

Platform tiers

Explore other tiers

TIER 01CORE REGULATORY FUNCTIONS

Core Regulatory Functions

Entity registry, 12-dimension risk engine, and supervisor workspace.

Explore Tier 01

TIER 02INTELLIGENT PROCESS AUTOMATION

Intelligent Process Automation

Intelligent intake, completeness verification, and analyst triage.

Explore Tier 02

TIER 03DATA GOVERNANCE & BI

Data Governance & BI-Driven Supervision

Peer benchmarks, sector heatmaps, and early-warning triggers.

Explore Tier 03

Book a Tier 4 walkthrough

See how CORA Tier 4 automates ICAAP and ORSA assessment with sovereign, explainable Glass-Box AI.

Schedule a demo

Every insight starts from governed data → Tier 3

CORA Tier 4 Cognitive — ICAAP & ORSA in Days by CRT, Leading Suptech Vendor