Planned capability · AI Lifecycle Governance

Govern AI from first ideato final retirement.

For firms expanding AI beyond employee chat: an AI systems inventory, use-case registration, risk classification, pre-deployment assessment, approval workflows, testing documentation, periodic reviews and lifecycle audit evidence. Planned for a later phase.

Book a Demo Free AI governance check Phase 3 · plannedNot available in the initial commercial release.

In development — not part of the initial commercial release. An early version is included in the demonstration workspace so firms can review the design; it is not offered as a production capability.

Accountable from the start

Every AI system and use case with a named owner before it is assessed.

Risk-based, not one-size-fits-all

Risk classification that decides how much assessment and approval each use case needs.

Nothing goes live untested

Pre-deployment assessments and testing documentation recorded before approval, and reviewed periodically after.

Concept preview

How it is designed to work.

A preview of the planned capability, using a fictional firm’s data. Design, not a production feature.

Concept preview · planned capability · fictional data
UC-004 Complaint summarisation and response draftingIllustrative
Owner
Approval routed for high residual risk
Date
In progress
Record
Separation of duties: the proposer cannot approve.

Evidence and approvals

  • Head of Compliance — approved
  • Data Protection Officer — waiting (DPIA screening)
  • Senior manager (SMF1) — waiting

Planned capabilities

What AI Lifecycle Governance will include.

In development — not part of the initial commercial release. An early version is included in the demonstration workspace so firms can review the design; it is not offered as a production capability.

  • AI systems inventory
  • AI use-case registration
  • Risk classification
  • Pre-deployment assessments
  • Approval workflows
  • Testing documentation
  • Periodic reviews
  • Lifecycle audit evidence

FCA AI governance expectations

How it relates to the FCA’s October 2026 publication.

The FCA’s AI in financial services: good practice and areas for improvement (19 October 2026) shares examples from industry. In its own words: “They do not create new requirements.” There is no standalone FCA AI rulebook; existing rules apply.

Below, each example it describes, and how this planned capability would support a firm’s own approach.

Proportionate governance covering the full lifecycle: scoping, design and development, testing and validation, deployment, ongoing monitoring and decommissioning

Dutira: Planned: a lifecycle view that follows those stages for every use case and shows gaps.

Structured challenge, testing and sign-off before deployment, involving staff across the business

Dutira: Planned: validation results, risk review and multi-step approvals recorded before activation.

Accountability assigned at the beginning, from the design stage onwards

Dutira: Planned: owners required at registration; approvers and decisions recorded with dates.

Piloting lower-risk use cases first, and keeping inventories that distinguish experimental from production tools

Dutira: Planned: use cases move through draft, assessment and approval before going live, and the inventory shows each stage.

The rules behind it

Existing rules continue to apply when firms use AI. Which apply depends on each firm’s permissions and business.

  • Rule Binding on the firms it applies to
  • Guidance How the FCA expects rules to be met
  • Good practice Illustrative examples; no new requirements

Your responsibility. Your firm sets its risk methodology, risk appetite and approval routes. Dutira would run and evidence the process you define. Dutira is not approved or endorsed by the FCA and does not guarantee regulatory compliance.

Interested in this capability?

Tell us about your plans for AI beyond employee chat; we will share the roadmap and timing.