RegTech AI SaaS / 2025
DORA AI
LLM risk scoring on contracts, expert review in the loop, and audit-ready trails at Tier-1 scale.
01
The business problem
DORA forced Tier-1 banks to prove control over ICT third-party risk across thousands of contracts, on timelines that the existing operating model could not absorb. Non-compliance carried nine-figure fines. The exposure was concrete: each unmanaged vendor relationship was a regulatory gap waiting to be found.
The process in place was manual, slow and built around expert judgment trapped in documents and meetings. Auditors read, compared and escalated contract by contract. That worked at a small scale. At portfolio scale it broke: backlog grew faster than review capacity, and the bank could not show a consistent, auditable trail from signal to signed decision.
The problem to solve was operational: a repeatable workflow that could surface risk across large contract sets, while keeping the auditor's last word that regulators still require. Speed had to come without losing an auditable trail.
02
My role and decisions
I led design end to end on an LLM compliance platform for ICT third-party contract audits under DORA: from the operating model with data engineers to the interactive MVP. No design handoff. One decision chain.
The decision that mattered most was architectural: the model scores and flags; the auditor validates, corrects and signs. Every architecture that removed the auditor from the decision path broke somewhere: either it failed regulatory accountability, or it eroded trust in the output. For Tier-1 banks, that loop was the only shape that held both accountability and trust.
My role and decisions
“Compliance teams need less friction between a risk signal and a decision they can defend.”
I mapped the compliance value chain and saw that the real cost sat in auditor hours, not in storing more documents. That finding reoriented the roadmap before a line of UI was locked: compress the path from signal to signed decision, not the volume of documents the system could hold.
Designing for the model meant redesigning how information appears before deciding what information appears. The LLM could explain every regulatory gap in detail; dumping that on the auditor first was counterproductive. I designed traffic lights (green, amber, red) so status came first and detail only when needed. The model output became raw material; the interface was something else.
I kept the last word with the auditor and made that control the path of least resistance. The MVP that came out of that chain is what we used for executive alignment and global pre-sales with Tier-1 clients.
03
Project achievements
DORA AI was a pre-revenue internal project. There are no post-launch adoption metrics, and inventing them would misrepresent the work. What shipped and held under scrutiny matters more.
We defined and validated a human-in-the-loop operating model that Tier-1 stakeholders could defend: the system scores and flags; the auditor decides and signs. We reoriented the product roadmap around auditor time as the primary cost driver, so every subsequent bet had to shorten the path from risk signal to signed decision.
We delivered a high-fidelity interactive executive MVP and used it in live pre-sales with banking clients. Alongside it, a compliance framework that could surface regulatory gaps across large contract portfolios in real time, shaped by discovery process mapping rather than by feature lists.
04
Outcome
The outcome was a product story banks could run in the room: an interactive MVP for executive alignment and global pre-sales, grounded in an operating model that kept human accountability in the loop.
Process mapping in discovery estimated audit cycles of three to four weeks for comparable contract reviews. The workflow brought that path down to days: the auditor still signs; what shortens is the stretch between signal, review and signature.
After the engagement, what remained was a decision architecture: where the model acts, where the expert must act, and how a Tier-1 bank can show both speed and a defensible trail under DORA.
What does your product need now?
A hard decision, a team, or a product that has to move. Let’s start there.
Contact: chema.a.job@gmail.com