Assess: establish the baseline.
Start with a small set of public identifiers. RuleboardAI organizes the public record into an initial regulatory risk view, and makes uncertainty visible rather than assuming it away.
- Securities filingse.g. annual report on Form 10-K
- Regulator approvals and conditionse.g. charter approvals
- Enforcement recordse.g. settled orders
Baseline profile
SoFi Technologies, Inc.
2.8 / 5.0 composite maturity
- Internal Governance
- ESG & Non-Financial Reporting
- Operational Risk
- Third-Party / Supply Chain Risk
Open questions logged as data gaps, not assumed away
What happens at this stage
Establish an initial, evidence-based regulatory risk baseline from a small set of clearly identified public inputs.
You provide
- Company name
- Company website
- Public or private status
- Ticker, if public
RuleboardAI does
- Identifies the institution and relevant public sources
- Sets the preliminary scope
- Classifies which regulatory workflows and obligations likely apply
- Produces an initial maturity view
- Separates what the evidence shows from open data gaps
- Keeps a citation for every observation
You receive
- Preliminary regulatory risk profile
- Initial maturity snapshot
- Preliminary findings
- What the public record cannot confirm (the data-gap register)
- Source appendix
- Recommended verification scope
Timing, evidence, and limits
Timing
Turnaround varies by product — SecureScope and AcquirerScope 5 business days; preliminary profiles ten business days. See each product page.
A preliminary profile covers one category for $500 one-time, delivered in ten business days from confirmed scope and payment.
Evidence and traceability
Every observation is tagged to its public source. Anything public data cannot confirm is logged in the data-gap register rather than assumed — public-source observations stay separate from anything later verified.
What this stage can and cannot establish
Public-source findings are preliminary. They are not an audit, legal opinion, certification, attestation, or a confirmation of internal-control effectiveness.
Your institution remains responsible for its own regulatory obligations.
The full method for this stage
Enters this stage
- Company name
- Company website
- Public or private status
- Ticker — for public companies only
Your product or review type is confirmed at intake as well — it sets the scope of the work, not the research inputs.
What RuleboardAI does
- Identify the institution and relevant public sources
- Establish preliminary scope
- Classify likely applicable workflows and obligations
- Produce a preliminary maturity view
- Separate observable evidence from unresolved data gaps
- Preserve citations and source provenance
You provide or confirm
- Confirm the intake inputs and the review type
- Nothing else is required to begin
What comes out
- Preliminary regulatory risk profile
- Initial maturity snapshot
- Preliminary findings and a data-gap register
- Source appendix and recommended verification scope
Product-neutral by design. CompanyScope, SecureScope, and AcquirerScope each enter the lifecycle through a product-specific version of this preliminary stage.
What happens next
Moves to Verify once the profile identifies the evidence and management confirmations needed to test or close the observed gaps.
Every engagement starts with a preliminary profile.
- Four basic inputs, no uploads or system access
- One category, $500 one-time
- Ten business days for a preliminary profile, from confirmed scope and payment
- Reviewed by a named person
Not an audit, legal opinion, or attestation.