FCA SYSC
Senior Management Arrangements, Systems and Controls — SYSC 4 and SYSC 8 require operational resilience evidence for material outsourced services and critical functions, including AI-driven services.
The EU AI Act is the loudest deadline, but UK FCA-regulated firms face three overlapping obligations on AI agent activity. Agent Audit's UK-specific export packs cover SYSC operational resilience, ICO automated decision-making, and Consumer Duty fair-value evidence in one platform.
Senior Management Arrangements, Systems and Controls — SYSC 4 and SYSC 8 require operational resilience evidence for material outsourced services and critical functions, including AI-driven services.
Where an automated decision has legal or similarly significant effect on a data subject, you must provide meaningful information about the logic involved — and Article 12 of the UK GDPR requires you to demonstrate compliance.
Firms must evidence fair outcomes for retail customers. Where AI is in the decisioning loop, the firm must be able to show how a specific decision was made and on what data.
The EU AI Act creates the loudest extraterritorial pressure on UK firms, but the domestic obligations apply already. An ICO subject access request can land tomorrow. The FCA can ask about your AI agent governance at any supervisory review. Consumer Duty applies whether the AI is in scope of the AI Act or not.
We've co-designed our UK packs with compliance officers at FCA-regulated firms. The format matches what your supervisors expect.
Start free → install in 5 minutes