Insights
Product, design, AI, and engineering perspectives from our team.
Governance & privacy29 Sept 2026
CPS 230 and AI Vendor Dependency Mapping for Financial Services
APRA's CPS 230 standard, effective from July 2025, requires regulated entities to map dependencies on critical operations — and AI vendors are increasingly part of that picture. Here's how financial services firms can approach AI vendor and model dependency mapping as part of operational resilience planning.
6 min readChris Kerr
Choosing a partner10 Sept 2026
AI Vendor Risk Management: Contracts, SLAs & Liability
Embedding a third-party AI model changes your risk exposure in ways standard SaaS contracts don't cover. Here's what actually needs to be in the agreement — from SLAs to indemnity to data handling.
7 min readChris Kerr