For risk & compliance professionals
Risk & compliance templates.
Built by someone who's used them.
Not recycled consulting decks. Not AI-generated policies. Frameworks built across 8+ years at commercial banks, fintechs, and BCG's Risk & Compliance practice — for the price of a team lunch.
Grounded in the guidance regulators actually cite. Ready to deploy.
Grounded in regulatory guidance
Not someone's old employer's templates with the logo swapped out. Built on SR 11-7, OCC bulletins, FFIEC standards, and state privacy laws — so you can defend what you're using.
Deploy in days, not months
You got hired to build a program, not spend 3 months formatting spreadsheets. Start with a defensible foundation and customize from there.
Better than what AI generates
ChatGPT can draft a policy — but can it tell you which regulatory guidance it's based on? These templates are built by a practitioner who's been through the exams.
Why this exists 💡
Every risk and compliance professional has done it: you join a new team, get asked to build a program from scratch, and end up calling a friend at your old company for their templates. Or a consultant brings in frameworks recycled from another client. The result? Documents that don't quite fit, questionable data privacy practices, and no confidence they'll hold up under regulatory scrutiny.
These templates are built on actual regulatory guidance — SR 11-7, OCC bulletins, FFIEC standards — so you're starting from a defensible foundation, not someone else's best guess.
More about me →Templates & Toolkits 🧰
From individual frameworks to comprehensive bundles — everything you need to build and run a risk program.
🎁 Free Resources
AI Risk Assessment Guide (Free)
A free introductory guide to AI risk assessment for financial services teams.
Issues Management Guide (Free)
A free introductory guide to building an effective issues management process.
📄 Individual Templates
AI Risk Assessment Template & Guide
Comprehensive AI model governance and risk assessment templates for financial services teams.
Issues Management Tracker & Template
End-to-end issues tracking and remediation management for risk and compliance teams.
New Product Risk Assessment
Structured risk review process for new products, services, and business initiatives.
Third-Party Risk Management (TPRM) Kit
Complete vendor risk management lifecycle—from initial due diligence to ongoing oversight.
Data Privacy Compliance Kit
GDPR, CCPA, and financial data privacy compliance templates and procedures.
Incident Response & Breach Notification Kit
Step-by-step incident response playbooks and regulatory breach notification templates.
Business Continuity & Disaster Recovery (BCP/DR) Kit
BCP and DR templates to keep your organization operational through disruptions.
📦 Bundles
Operational Risk Management Suite
Bundle: AI risk, issues management, and new product risk assessment templates.
GRC Starter Kit
Bundle: Essential templates to stand up a GRC program from scratch.
Complete Risk Management Suite
The full library — every template and guide at a significant bundle discount.
Compliance Essentials Bundle
Bundle: Data privacy, incident response, and BCP/DR templates.
8+
Years in risk & compliance
6
Ready-to-use template kits
50+
State laws & regulations covered
From the Journal ✍️
View all posts →AI Risk Management Framework: A Practical Approach for Financial Institutions
Build an AI risk management framework that identifies, assesses, and mitigates real AI risks. Includes risk taxonomy, tiering model, and 90-day roadmap.
Mar 20, 2026
AI RiskResponsible AI Framework: Moving Beyond Principles to Practice
Build a responsible AI framework that turns fairness, transparency, and accountability principles into operational controls. Includes bias testing, impact assessments, and 120-day roadmap.
Mar 20, 2026
Regulatory ComplianceSEC Closes $26M Ponzi Case Against Bin Hao and Qidian LLC — What It Teaches Compliance Teams About Affinity Fraud
The SEC obtained a final judgment against Bin Hao and Qidian LLC for a Ponzi scheme that targeted Chinese-American investors. Here's what compliance teams need to know about affinity fraud detection and controls.
Mar 20, 2026
Stay in the loop ✉️
Practical insights on AI risk, regulatory changes, and compliance strategy — written by someone who's been in the trenches. No fluff, no spam.
Join practitioners from banks, fintechs, and asset managers.