Put ownership and evidence behind technology change.
Reign helps banks operate engineering platforms, progress defined software changes and govern AI traffic. Its operating and evidence records give engineering, risk, compliance and audit teams material they can review.
Connect the work to the record.
Software platforms and changes
Reign Ops is available today. iTmethods assumes the agreed operating responsibilities for the engineering tools and open source services in scope, subject to agreed service measures. Reign Factory is in beta for eligible, well-specified work; it implements and tests the change, then opens a merge request in the bank’s existing review process.
AI traffic
Reign Gateway is available today. It applies identity, access, policy and spend controls to AI calls sent through it and creates an evidence record showing the caller, policy decision and outcome.
Review and assurance
Reign Assurance is in co-design development to connect requirements, checks, results, exceptions, recorded decisions and coverage so the bank’s business, risk, compliance and audit reviewers can assess what the evidence supports. iTmethods does not validate its own work, independently review it or subject it to effective challenge, and does not certify, attest, issue an audit opinion or provide independent assurance, so where any of those functions is required, we would work with a firm that holds that mandate.
Model-risk and resilience expectations differ by jurisdiction.
OSFI Guideline E-23
Published on 11 September 2025 and taking effect on 1 May 2027, E-23 applies enterprise-wide model-risk principles to federally regulated financial institutions and addresses AI and machine learning methods in its model-risk context.
SR 26-2
Issued on 17 April 2026, the revised US guidance excludes generative and agentic AI from its scope. It directs banking organizations to use their own risk-management and governance practices for tools, processes and systems outside the guidance.
DORA
DORA has applied since 17 January 2025. It addresses ICT risk, resilience and third-party oversight for financial entities, including an EU oversight framework for providers designated as critical.
These instruments provide context for the operating and evidence needs described on this page. The bank’s risk and compliance functions and counsel determine applicability, required controls and how the evidence is used. iTmethods makes no compliance, certification or accreditation claim under any framework.
Discuss one banking technology priority.
Let’s start with one engineering platform, software change or AI traffic path and the teams that need to review it.