REGULATION IN.
EXAM READY OUT.
EVERY STEP CITED.

Tracfox runs your compliance program with auditable AI agents: stay ahead of regulatory change and its impact, keep controls and evidence current, and walk into every exam ready. Every step traces to a citation; every citation to a version of the law.

31 CFR 1010.610
release 63b92c02
(a)
(b)
(c)
(d)
(e)
(f)
Atomic obligations
10 obligations · 7 controls
Establish a risk-based due diligence program for U.S. correspondent accounts of foreign financial institutions as part of the AML program.
§ 1010.610 · applies-if covered FI · foreign correspondent accounts · eff. 2006-07-05
Assess money laundering risk of each foreign correspondent account based on all relevant factors, including the listed factors as appropriate.
§ 1010.610 · applies-if foreign FI correspondent accounts · eff. 2006-07-05
Maintain procedures for when appropriate DD or EDD cannot be performed, including refuse, suspend, SAR, or close decisions.
§ 1010.610 · applies-if DD or EDD cannot be performed · eff. 2006-07-05
+ 7 more, each carrying its citation
→ mapped to 7 controls evidence tracked per control

The whole trace, one system

Reading the regulation is the first stop, not the product. The pipeline runs to the exam and keeps running after it.

regulationobligationscontrolsevidenceexam
reg

Regulation management

Federal CFR, all 50 states, FCA and PRA, parsed into atomic obligations with citation, applicability and effective date. Amendments arrive as diffs against the version you mapped.

NAC 665.020v.2024-11-08 → v.2026-06-30
186 atomic obligations · re-extracted on amendment
ctl

Controls management

An obligation with no control is a gap, and it says so before an examiner does. A changed obligation flags every control it touches and queues the review.

obl-assess-correspondent-ml-riskcontrols mapped
obl-compile-action-taken⚑ no control: gap
amended · eff. 2026-09-01controls queued → review
evd

Evidence validation

Evidence is collected on a schedule and validated against what the control actually requires: right document, right period, right signer. Stale or missing evidence becomes a task, not a finding.

policy attestationcurrent
system report◐ expires 2026-08-31
training log○ missing → task created
exam

Exam preparation

Every examiner request has one answer shape: citation → obligation → control → evidence. Scope the sections under review, export the chain, hand it over. First-day letters stop being a scramble.

§ 1010.610obligationcontrolevidence
exam scope: 31 CFR 1010 · 1020 · 1060⇩ export chain
cont

Continuous compliance

Between exams, the system watches: amendments, effective dates, expiring evidence, unresolved gaps. Each lands in a work queue and rolls up into a live posture score. Not a vanity number: every point traces to the obligations behind it.

compliance postureas of 2026-07-28
81%
obligations covered 2,433 / 3,018
evidence current 92%
open gaps → in queue
amendments pending → review

Two planes, one trace

Shared

A versioned regulatory corpus

Statutes, rules and amendments, parsed once and version-stamped. When the law changes, the change arrives as a diff against the version your controls were mapped to, not as a surprise.

Yours

Controls and evidence, per tenant

Obligations map many-to-many onto a functional control library. Controls collect evidence. When an examiner asks why a control exists, the answer is a citation, not a meeting.

New product. New state. Know the rules before you build.

With the corpus already parsed, scoping an expansion is a query, not a six-month research project. Describe the product and the jurisdiction: applicability conditions (charter, asset threshold, activity) filter to the obligations that would bind you, and what your controls don't already cover is the launch checklist, citations attached.

scenariocredit union · Nevada
obligations in scope370
covered by existing controls329
new controls required41 → launch checklist

Agents do the work. You keep the sign-off.

Each stage of the pipeline is run by an agent. Every one of them drafts; none of them decides: output lands in a review queue with the citation that justifies it, and nothing enters your control library or an exam package without a named approver. Every action, agent or human, is logged.

extraction agentdrafted 10 obligations → review
mapping agentcontrol links proposed → review
evidence agentartifacts flagged → task
monitoring agentamendment diff → review
approved by BSA officerlogged · audit trail

Ask in plain language. Get answers with citations.

Ask what changed, where the gaps are, what an examiner will ask — then hand off the drafting. Answers come from the mapped corpus and your own policies and controls, never from memory: one question, every jurisdiction you operate in.

Every draft goes to your review queue, not into production. No black box: if it can't cite it, it says so instead of guessing.

What changed in our deposit rules this quarter?

Amendments in scope for your charter: 3. One takes effect this quarter; the obligations it amends, and the controls they touch, are queued for review.

§ 707.4 · v.2025-10-01 → v.2026-09-01
Draft the control updates.

Drafted, with the amended text attached. In your review queue; nothing applies until you approve.

awaiting your sign-off

Citations are load-bearing

Every obligation carries its section-level citation, applicability conditions and effective date. Remove any one and it doesn't ship.

Where it fails, it says so

Ambiguous applicability is flagged for a human, not guessed. Nothing enters the trace unreviewed.

Built for the people who get examined

Compliance officers, BSA officers, and internal audit at mid-market financial institutions.

Credit unions

Obligations scoped to your charter and examiner, without bank-only noise.

Community banks

Asset-threshold aware: see which obligations trigger as you grow, before they do.

Neo banks

Activity-based scoping across the states you operate in and the partners you ride on.

Digital asset firms

State-by-state money transmission plus fast-moving federal text, versioned as it moves.

WALK THE TRACE ON YOUR OWN REGULATION

from alert to assurance

Bring a section you're examined against. Watch it decompose, map onto controls, and demand evidence. An evaluation is one regulation, run against your own control library: small, inspectable, yours to judge.

no deck. a live terminal.