Put ownership and evidence behind technology change.
Reign helps banks operate engineering platforms, move defined software changes through review and govern AI traffic. Its operating and evidence records give engineering, risk, compliance and audit teams material they can review.
Connect the work to the record.
Software changes
Reign Factory is available today for eligible, well-specified work. It implements and tests the change, then opens a pull request in the bank’s existing review process.
Reign Factory →AI traffic
Reign Gateway is available today. It applies identity, access, policy and spend controls to AI calls sent through it and creates an evidence record showing the caller, policy decision and outcome.
Reign Gateway →Operated engineering platforms
Reign Ops is available today. iTmethods assumes the agreed operating responsibilities for the engineering tools and open source services in scope, subject to agreed service measures.
Reign Ops →Model-risk and resilience expectations differ by jurisdiction.
OSFI Guideline E-23
Published on 11 September 2025 and taking effect on 1 May 2027, E-23 applies enterprise-wide model-risk principles to federally regulated financial institutions and addresses AI and machine learning methods in its model-risk context.
SR 26-2
Issued on 17 April 2026, the revised US guidance excludes generative and agentic AI from its scope. It directs banking organizations to use their own risk-management and governance practices for tools, processes and systems outside the guidance.
DORA
DORA has applied since 17 January 2025. It addresses ICT risk, resilience and third-party oversight for financial entities, including an EU oversight framework for providers designated as critical.
Read the European Commission’s DORA overview →
Read the EBA’s oversight framework →
The EU AI Act page, where credit scoring is an Annex III high-risk use →
These instruments provide context for the operating and evidence needs described on this page. The bank’s risk and compliance functions and counsel determine applicability, required controls and how the evidence is used. Beyond SOC 2 Type II for Reign Ops, no other certification or accreditation is claimed.
Choose the deployment model that fits the system and data scope.
A bank’s risk, compliance and audit teams review where applications, data and records sit and who holds administrative access. The Deployment page explains how each is recorded.
Discuss one banking technology priority.
Let’s start with one engineering platform, software change or AI traffic path and the teams that need to review it.