SOURCE GOVERNANCE · VERSION CONTROL · HUMAN REVIEW
Regulatory Source Register
A controlled index of authoritative source portals for regulatory content used by RegTech Nexus AI. It identifies where reviewers should verify requirements; it does not certify that every tool mapping, calculator formula or jurisdiction pack is current.
Baseline: 17 October 2026. Review cadence: monthly and whenever an issuing authority announces a material change. Individual instruments must be checked at point of use.
Download source register (CSV) → · Regression test protocol →
Source register
Important: “Portal identified” means the official issuer’s source portal is listed. It does not mean every relevant instrument, amendment, commencement date or applicability condition has been checked. Do not label a tool mapping current until instrument-level review is recorded.
| Authority | Source family | Official primary source | Relevant use | Baseline status | Required validation |
|---|---|---|---|---|---|
| Bangladesh Bank | Circulars, prudential and risk-management rules | Official portal | Banking regulation, capital, credit, governance and reporting | Portal identified; instrument-level freshness not assessed. | Record circular number/date, addressees, effective date, amendments and supersession. |
| BFIU | AML/CFT/CPF circulars and guidance | Official portal | KYC/CDD/EDD, STR/SAR, sanctions, TBML and financial crime | Portal identified; instrument-level freshness not assessed. | Confirm current circular ID/date, sector applicability and amendments. |
| FATF | Recommendations, Interpretive Notes, methodology and guidance | FATF Recommendations | AML/CFT, sanctions, beneficial ownership and risk-based approach | Official page states amended June 2026. | Check amendment history and instrument-specific changes before mapping controls. |
| Basel Committee / BIS | Basel Framework, standards, FAQs and implementation dates | Basel Framework · Publications | Capital, liquidity, leverage, risk and Pillar 3 | Framework includes effective and future-dated changes. | Record module ID, status, local implementation and effective date. |
| NIST | AI Risk Management Framework and profiles | NIST AI RMF | Explainable AI, AI governance and agent-control diagnostics | NIST states AI RMF 1.0 is being revised. | Record version and draft/final status; do not present voluntary guidance as law. |
| European Union / EUR-Lex | Official legal texts, including Regulation (EU) 2024/1689 | AI Act official text | AI governance and EU AI Act explainers | Official text identified; applicability/commencement not assessed here. | Check consolidated text, amendments, provision-specific dates, transitions and scope. |
| MAS | Notices, guidelines, regulations and circulars | Regulations and Guidance · AML/CFT | Banking, AML/CFT, outsourcing, technology and AI risk | Portal identified; instrument status must be checked. | Record entity type, instrument class, revision date, commencement and applicability. |
| CBUAE | Rulebook regulations, standards and guidance | CBUAE Rulebook | Banking controls, AML/CFT, governance and UAE readiness | Formal publication may prevail if inconsistent. | Cross-check Official Gazette where legal effect or conflict is material. |
| DFSA | Rulebook modules and notices | Official site | DIFC financial-services requirements | Module-level freshness not assessed. | Link exact module; distinguish DIFC/DFSA from UAE federal/CBUAE scope. |
| UN Security Council | Consolidated sanctions list and committee measures | UNSC Consolidated List | Sanctions education and source directory | This does not imply a live screening function. | Check list update timestamp, identifiers and committee notices; apply local law. |
| US Treasury OFAC | Sanctions list service and programme updates | OFAC Sanctions List Service | Sanctions education and official-source directory | Not a substitute for institution-approved screening. | Verify list date, identifiers, programme context and legal applicability. |
Minimum instrument-level record
- Issuer, jurisdiction, exact instrument title/number and official URL.
- Publication/revision date, effective date, transition period and supersession status.
- Instrument class: law, regulation, binding notice, standard, guidance, consultation or report.
- Entity/product/activity scope and applicability assumptions.
- Requirement-to-control mapping, affected tool/module, reviewer, review date and next review trigger.
- Prior version, change summary, test evidence and affected calculation/output checks.
Severity and escalation
- Critical: a superseded source materially invalidates a live output or instruction.
- High: missing or ambiguous primary source affects a material banking, AML/CFT, sanctions or AI-governance conclusion.
- Medium: metadata, applicability explanation or traceability is incomplete without a confirmed incorrect result.
- Low: editorial or link-quality issue without material impact.
Where evidence is incomplete, record INSUFFICIENT EVIDENCE — VERIFICATION REQUIRED. A working URL or search snippet alone does not establish current status.