Skip to content

Proxara keeps the firm’s AI on the record.

Every retrieval and action is matched to the rules it touches and signed as it happens.

How Proxara builds the record.

Every action is tagged

Every record retrieved and every action taken carries the rule it triggers.

Every record is signed

Each entry locks to the one before it. An outside examiner can check nothing was changed.

Every record is kept

Kept as long as the firm’s retention rule requires. Exportable any time.

Proxara
Overview
Intelligence
Threat Coverage
Compliance
MCP Tools
Activity
Compliance
Framework postureAudit TrailExaminationReports
Board pack
AI activity summary, redaction volume, and incidents worth escalating. Formatted for the board.
Generate
Cyber-insurance review
Coverage posture and control evidence for the carrier's underwriter.
Generate
Regulator packet
Reg S-P + Notice 24-09 evidence bundle: redaction events, supervisor approvals, hash-chained audit log, signing public key.
regulator-packet-quarter.zip · chain + signing key included
ISO 42001 evidence
Statement of applicability and control-test evidence for the auditor.
Generate
30DQuarter6 monthsYear
examiner — proxara-audit-verify — 96×28
examiner@laptop ~ % proxara-audit-verify regulator-packet-quarter.zip --pubkey northbridge.pub
reading export ............ 4,213 events
verifying signatures ...... 4,213/4,213 ok
walking hash chain ........ seq 1 to 4,213
genesis anchor ............ matched
CHAIN VERIFIED · no gaps · no edits
Chain intact · seq 4,213
No gaps. No edits. No trust required.

One request, six checks on the record.

The match happens while the employee works, not at quarter end.

“Draft a portfolio summary for the Mendez account, include performance against the S&P benchmark, and prepare an outreach note for review.”

Asked by Lina M. at 2:42 pm.

Employee permissionsLina can see the Mendez account
Client identityreplaced before the model reads it
Records retrieved3 sources cited
Action proposedoutreach note, held
ApprovalOmar J., 2:47 pm
Resulting statedraft in Outlook, verified
Matched to the rules the firm answers to.SEC 2024-58

The evidence pack is one click.

Every retrieval and action in the period: who asked, what was approved, what ran.

The pack assembles from what is already there.

The rules this record answers to.

Rules in force across the US, EU, and UK ask firms to show what their AI did.

US
United States
SEC · FINRA
Reg S-P, 2024

A written incident plan and 30-day breach notice. Smaller firms in scope since June 3, 2026.

SEC 2024-58
FINRA Rule 3110

Supervision duties reach generative AI, per the 2026 oversight report.

FINRA 2026 Report
FINRA Rule 2210

Communication rules cover AI-drafted content. Recordkeeping sits in Notice 25-07.

FINRA Notice 25-07
EU
European Union
Regulation 2024/1689 · AI Act
Article 12

High-risk AI systems must keep logs that make their operation traceable.

AI Act Art 12
Article 26

Firms using those systems keep the logs for at least six months.

AI Act Art 26
Timeline

High-risk obligations and their records took effect August 2, 2026.

EU Timeline
UK
United Kingdom
FCA · ICO
FCA AI approach

AI is supervised through existing rules, not a new regime.

FCA AI approach
SYSC & Consumer Duty

The FCA’s existing control rules cover AI use unchanged.

FCA AI in financial services
AI Consortium, 2025

Live testing and the Supercharged Sandbox are now running.

FCA News, 2025

How long the records must be kept:

3 years
minimum under SEC Reg S-P and FINRA Rule 3110
[SEC 2024-58]
6 months
minimum under EU AI Act Article 26
[AI Act Art 26]

Put AI to work across the firm’s systems.

Tell us where the firm stands on AI oversight. Our team replies in a few hours.

Talk to us