Regulatory risk profile
CompanyScope
A structured regulatory risk profile of your own institution
Most institutions can answer any single regulatory question, but few can show one consolidated, current view of where they stand — which obligations apply, how mature each control area is, and what an examiner or counterparty would find first.
Prefer an invoice? Request one below. Payment methods are listed with the price at the bottom of this page.
The preliminary profile is free. Single-category Snapshots are $500/month each.
Public-source scan
Filings, registers, and enforcement records only. No system access, no document requests.
RCPS classification
Seven classification axes scope the 48-workflow universe to your entity.
Scored profile delivered
Maturity scored 1–5 per axis, findings ranked by severity, gaps logged. 1–2 business days.
Representative output
IllustrativeComposite maturity
2.6 / 5.0
Defined
Achievable target
3.8 / 5.0
- Governance3.1 / 5
- Risk Management2.2 / 5
- Compliance2.9 / 5
- Cybersecurity2.0 / 5
- Third-Party Risk2.7 / 5
- Privacy3.0 / 5
- Monitoring2.3 / 5
- 4
High
- 5
Medium
- 0
Low
Select an axis to see the maturity band its score falls in, and what the next band requires.
Restated from the public sample profile (SoFi Technologies — a public company, not a client). Your report reflects your own entity.
Who this is for
- Chief Risk Officers, CISOs, and Heads of Compliance at U.S. financial institutions
- Founders and operating executives preparing for an exam, diligence, or a board review
- Teams that want one category (e.g. cybersecurity or privacy) tracked month to month
When it lands on your desk
- An examination, audit, or counterparty diligence request is on the calendar
- New obligations arrived — a new license, product line, or regulator
- The board or an investor asked “where do we actually stand?”
The work
What CompanyScope does
- Classifies your institution with the RCPS model — seven classification axes that determine which of the 48 workflows apply
- Scores control maturity 1–5 across seven axes and rolls them into a composite with an achievable target
- Surfaces preliminary findings by severity, each tied to a source and an affected obligation
- Produces a data-gap register — what public sources could not resolve and what evidence would resolve it
- Ends in a verification roadmap: the ordered list of what to confirm next
What you provide
- Company name
- Company website
- Public or private status
- Ticker (public companies only)
- For verified conclusions: internal evidence, under a signed Letter of Authorization
How the work is done
- Public-source first: the preliminary profile is built entirely from public records — no system access, no document requests.
- The RCPS classification scopes the 48-workflow universe to your entity: in scope, conditional, or out of scope.
- Findings are labeled Confirmed, Likely, Conditional, or Escalate, and every conclusion carries its evidence state.
- Deeper, evidence-verified review happens only after a signed Letter of Authorization.
Scoped against
- RCPS
- SOX / SEC
- BSA / AML
- FFIEC
- Basel III
- SOC 2
- GDPR / CCPA
Named standards and registers this product works from. Not a certification, attestation, or endorsement of any institution.
Deliverables
What you receive
- Regulatory risk profile document with the RCPS maturity scorecard
- Preliminary findings by severity, with sources and recommended actions
- Workflow scope determination across the 48-workflow universe
- Data-gap register and verification roadmap
Typical timing
Free preliminary profile in 1–2 business days. Snapshots deliver monthly.
Evidence & source treatment
How we handle what we can't confirm
Every conclusion carries the state of the evidence behind it. Nothing is inferred past what the record supports, and anything unresolved is recorded as a gap with the document that would close it.
Read the RCPS methodology- Preliminary profiles use publicly observable evidence only and say so on every finding.
- Client-provided evidence upgrades findings from preliminary to verified — never silently.
- Anything unresolved stays in the data-gap register instead of being guessed.
What CompanyScope is not
- The preliminary profile never accesses client systems or internal documents.
- Not legal, regulatory, audit, or compliance advice — your institution remains responsible for its own regulatory obligations.
- Not an audit, audit opinion, control attestation, or certification of any kind.
Questions
CompanyScope FAQ
What do you need from us to start?
Four inputs: company name, website, public/private status, and ticker if public. The preliminary profile requires nothing else — no system access, no document uploads.
Is the preliminary profile really free?
Yes. It is built from public sources in 1–2 business days, with no credit card required. It is also how most customers decide whether a paid Snapshot or Full Monitoring makes sense.
What is a Snapshot?
A single-category CompanyScope delivered monthly — any one of the 11 categories (governance, cybersecurity, privacy, and so on) at $500/month per category.
Can the findings be treated as an audit?
No. CompanyScope is a structured intelligence product, not an audit or attestation. Preliminary findings are public-source and labeled as such; verified conclusions require your evidence under a Letter of Authorization.
How do we cancel a Snapshot?
Monthly billing, cancellable with 30 days' written notice to support@ruleboardai.com.
CompanyScope — $500 / month per category
Secure card checkout via Stripe, or an invoice (wire, ACH, or certified funds) through the intake form. No per-seat surprises. No hidden fees. Monthly billing, cancel anytime with 30 days' notice.