Report: give decision-makers a sourced, actionable baseline.
Each report organizes the evidence into a structured profile, so your team can see what is supported, what remains uncertain, and which verification or remediation step comes next.
Regulatory risk profile
SoFi Technologies, Inc.
Gap Mode — Preliminary · September 26, 2026
Maturity scorecard
Composite 2.8 / 5 · illustrative target 3.9 / 5 (not a promised outcome)
- Internal Governance
- ESG & Non-Financial Reporting
- Operational Risk
Source appendix
Every citation listed with a link to the public document
Prioritized findings
Crypto / Digital Asset Regulatory Position — SoFi Crypto + SoFiUSD
CFPB Supervision — Commenced January 1, 2024
Recommended next step
Confirm whether the Office of the Comptroller of the Currency (OCC) non-objection was obtained under the Operating Agreement and document the regulatory position for both products.
Not an audit, legal opinion, or attestation.
What happens at this stage
Turn the scoped research and verified evidence into a final regulatory risk report that supports your team's decisions.
If you stop after Assess, your preliminary profile is the report. If you go on to Verify, this stage produces the final version, with verified evidence kept visibly separate from what stayed unresolved. Structured for internal review and evidence verification.
You provide
- A review of the draft and any factual corrections
- Your remediation priorities
- No new evidence to finalize
RuleboardAI does
- Assembles findings into one structured report
- Applies evidence labels and source citations
- Ranks risk areas and data gaps by priority
- Recommends next steps
- Has a named person review it before delivery
You receive
- Executive summary
- Regulatory risk maturity scorecard
- Prioritized findings
- Public-source citations
- Data-gap register
- Recommended verification and next-step plan
Timing, evidence, and limits
Timing
After the evidence review is complete
Evidence and traceability
Every finding carries its citation and reasoning trail. Confirmed findings are presented separately from unresolved limitations, so the reader always knows what is established and what is not.
What this stage can and cannot establish
The final report is a structured risk-intelligence deliverable. It is not a legal opinion, audit opinion, certification, attestation, or regulatory approval.
Your institution remains responsible for its own regulatory obligations.
The full method for this stage
Enters this stage
- Preliminary profile
- Evidence-verification results
- Confirmed findings and remaining limitations
- Updated workflow and maturity classifications
What RuleboardAI does
- Reconcile preliminary and verified conclusions
- Finalize finding severity and maturity treatment
- Map findings to relevant workflows and obligations
- Separate confirmed findings from unresolved limitations
- Prioritize actions and preserve an auditable reasoning trail
- Produce executive and operational views of the same assessment
You provide or confirm
- Review the draft and confirm factual corrections
- Align on remediation priorities
- No new evidence is required to finalize
What comes out
- Executive summary and final risk profile
- Maturity scorecard and verified strengths
- Prioritized findings and a recommended action roadmap
- Evidence and source appendix, with documented scope limitations
What happens next
The report establishes the approved baseline that monitoring and tracking operate against.
Monitor and Resolve are designed, not built. Neither is sold, and the report is complete on its own.
Every engagement starts with a preliminary profile.
- Four basic inputs, no uploads or system access
- One category, $500 one-time
- Ten business days for a preliminary profile, from confirmed scope and payment
- Reviewed by a named person
Not an audit, legal opinion, or attestation.