Module C · AI Monitoring & Controls

See how AI is used in your workspace.Act on what needs attention.

Visibility of AI activity within the Dutira workspace: policy alerts, usage by department and model, risk events and incidents on record, and audit logs — against policies and controls you configure.

Book a Demo Free AI governance check Phase 1 · available now

Usage visibility

Who is using which models for what kinds of work — as metadata, with people pseudonymised by default.

Policy alerts

Blocks, warnings, held requests and sensitive-data events, with alerts when they pass thresholds you set.

Risk events on record

Incidents, investigations and remediation tracked with owners and due dates, in the same audit trail.

See it work

Try it.

An interactive demonstration with a fictional firm’s data.

Illustrative demo · fictional data
Monitoring & Alerts — last six monthsIllustrative

Requests through approved models

In product

4,812

Unapproved model attempts

In product

23

People using the workspace

In product

186

Figures are fictional. Monitoring shows metadata only, with people pseudonymised by default.

Capabilities

What it does today — and what is coming.

In the product today

  • Monitoring of AI activity within the Dutira workspace: usage by department, model and rule
  • Policy alerts: blocks, warnings, held requests and very fast approvals against configurable thresholds
  • Sensitive-data events and masking
  • Risk event recording: incidents, investigations and remediation with owners and due dates
  • Audit logs: hash-chained, with an integrity check
  • Configurable policies and controls, tested on example prompts before publishing

Planned

  • Scheduled alert evaluation (today, alerts are evaluated when the dashboard is opened)
  • Export to your SIEM

Phase 2 · planned

Coming later

Continuous AI Monitoring

Phase 1 monitors activity inside the Dutira workspace. It does not watch other AI applications or employee devices. The planned expansion extends monitoring to supported external AI tools and adds deeper analysis.

  • Advanced risk detection with behavioural baselines
  • Monitoring across supported external AI tools
  • Configurable alert thresholds evaluated continuously
  • Investigation workflows
  • Automated reporting
  • Advanced compliance analytics

FCA AI governance expectations

How it relates to the FCA’s October 2026 publication.

The FCA’s AI in financial services: good practice and areas for improvement (19 October 2026) shares examples from industry. In its own words: “They do not create new requirements.” There is no standalone FCA AI rulebook; existing rules apply.

Below, each example it describes, and how this module supports a firm’s own approach.

Continuous monitoring dashboards with thresholds and benchmarks to oversee performance and escalate issues

Dutira: Dashboards and alert thresholds for usage, exceptions, sensitive data and incidents within the workspace.

Monitoring live outcomes so issues can be spotted and dealt with quickly; avoiding long gaps between reviews

Dutira: Live exception and incident views with remediation tracking.

Structured evaluation frameworks to assess generative AI outputs against clear criteria

Dutira: A policy test bench re-runs agreed scenarios after rule or model changes. Output quality scoring is planned.

Feedback from staff on whether they used or modified an AI output, and why

Dutira: Approvals and edits by reviewers are recorded with their reasoning.

The rules behind it

Existing rules continue to apply when firms use AI. Which apply depends on each firm’s permissions and business.

  • Rule Binding on the firms it applies to
  • Guidance How the FCA expects rules to be met
  • Good practice Illustrative examples; no new requirements

Your responsibility. Your firm decides what to monitor, its thresholds and how quickly to act. Monitoring supports that judgement; it does not replace it — and it covers the workspace, not every AI tool your people might use elsewhere. Dutira is not approved or endorsed by the FCA and does not guarantee regulatory compliance.

See it with your own policies.

A 30-minute walkthrough, tailored to your firm.