Module C · AI Monitoring & Controls
See how AI is used in your workspace.Act on what needs attention.
Visibility of AI activity within the Dutira workspace: policy alerts, usage by department and model, risk events and incidents on record, and audit logs — against policies and controls you configure.
Usage visibility
Who is using which models for what kinds of work — as metadata, with people pseudonymised by default.
Policy alerts
Blocks, warnings, held requests and sensitive-data events, with alerts when they pass thresholds you set.
Risk events on record
Incidents, investigations and remediation tracked with owners and due dates, in the same audit trail.
See it work
Try it.
An interactive demonstration with a fictional firm’s data.
Requests through approved models
In product4,812
Unapproved model attempts
In product23
People using the workspace
In product186
Figures are fictional. Monitoring shows metadata only, with people pseudonymised by default.
Capabilities
What it does today — and what is coming.
In the product today
- Monitoring of AI activity within the Dutira workspace: usage by department, model and rule
- Policy alerts: blocks, warnings, held requests and very fast approvals against configurable thresholds
- Sensitive-data events and masking
- Risk event recording: incidents, investigations and remediation with owners and due dates
- Audit logs: hash-chained, with an integrity check
- Configurable policies and controls, tested on example prompts before publishing
Planned
- Scheduled alert evaluation (today, alerts are evaluated when the dashboard is opened)
- Export to your SIEM
Phase 2 · planned
Coming laterContinuous AI Monitoring
Phase 1 monitors activity inside the Dutira workspace. It does not watch other AI applications or employee devices. The planned expansion extends monitoring to supported external AI tools and adds deeper analysis.
- Advanced risk detection with behavioural baselines
- Monitoring across supported external AI tools
- Configurable alert thresholds evaluated continuously
- Investigation workflows
- Automated reporting
- Advanced compliance analytics
FCA AI governance expectations
How it relates to the FCA’s October 2026 publication.
The FCA’s AI in financial services: good practice and areas for improvement (19 October 2026) shares examples from industry. In its own words: “They do not create new requirements.” There is no standalone FCA AI rulebook; existing rules apply.
Below, each example it describes, and how this module supports a firm’s own approach.
Continuous monitoring dashboards with thresholds and benchmarks to oversee performance and escalate issues
Dutira: Dashboards and alert thresholds for usage, exceptions, sensitive data and incidents within the workspace.
Monitoring live outcomes so issues can be spotted and dealt with quickly; avoiding long gaps between reviews
Dutira: Live exception and incident views with remediation tracking.
Structured evaluation frameworks to assess generative AI outputs against clear criteria
Dutira: A policy test bench re-runs agreed scenarios after rule or model changes. Output quality scoring is planned.
Feedback from staff on whether they used or modified an AI output, and why
Dutira: Approvals and edits by reviewers are recorded with their reasoning.
The rules behind it
Existing rules continue to apply when firms use AI. Which apply depends on each firm’s permissions and business.
- PRIN 2A Consumer Duty Rule
- FG22/5 Consumer Duty guidance Guidance
- FG21/1 Fair treatment of vulnerable customers Guidance
- SYSC 4.1 General organisational requirements Rule
- Rule Binding on the firms it applies to
- Guidance How the FCA expects rules to be met
- Good practice Illustrative examples; no new requirements
Your responsibility. Your firm decides what to monitor, its thresholds and how quickly to act. Monitoring supports that judgement; it does not replace it — and it covers the workspace, not every AI tool your people might use elsewhere. Dutira is not approved or endorsed by the FCA and does not guarantee regulatory compliance.
One platform, launched in phases
- Phase 1 · available nowGoverned AI WorkspaceEnable your people to use approved AI tools within company-defined safeguards.Explore
- Phase 1 · available nowAI Policy & AttestationTurn written AI requirements into practical safeguards, workflows and staff acknowledgements.Explore
- Phase 1 · available nowSenior Management OversightGive decision-makers the visibility and evidence needed for responsible AI adoption.Explore
- Phase 1 · available nowFCA AI Governance CheckerIdentify potential gaps in your AI governance framework against relevant FCA regulatory expectations — free.Explore
- Phase 3 · plannedAI Lifecycle GovernancePlanned: inventory, registration, risk classification, assessment, approval and review for every AI use case.Explore
- Phase 4 · plannedAI Agent GovernancePlanned: registration, identities, permissions, action authorisation, human approval and limits for autonomous AI agents.Explore
See it with your own policies.
A 30-minute walkthrough, tailored to your firm.