WILDCARDTECH

AI may prepare the decision. It still has to be explainable.

Onboarding, credit, complaints: in financial services every step has to be traceable, and under DORA, ICT services that support critical or important functions need an exit strategy. We build processes in which AI reads and prepares, people decide, and the evidence is produced along the way.

Talk to an engineer ↗

DORA · EU AI Act · Data Act

01 — The industry

Traceability, dependencies, documents.

What auditors ask, and what still runs on paper.

Traceability

Which rule applied, who released, what the system knew at that moment: auditors ask months later. The answer has to come from the system, not from memory.

Dependencies

DORA has applied since 17 January 2025. ICT services that support critical or important functions need an exit strategy, and contracts with the providers have to provide for it.

Documents

Identity documents, payslips, account statements, annual accounts: onboarding and lending still run on documents that someone has to read.

02 — Use cases

Where AI helps, and where a person decides.

For each use case: what the agent does, where a person decides, and which products it is built with. Connecting your existing systems is project work.

  1. 01

    Know your customer (KYC) and onboarding

    A KYC check is an end-to-end reference example of Process Core: from the application to a result that can still be verified later.

    System
    Checks inputs against a schema, evaluates a versioned rule, and records versions, inputs and results.
    Human
    A person completes the review task under their own identity; the decision becomes part of the auditable history.

  2. 02

    Preparing credit decisions

    Payslips, account statements and annual accounts arrive as PDFs and scans.

    Agent
    Reads the figures together with the passage they come from, checks completeness and prepares the assessment.
    Human
    A person makes the credit decision. Inputs and rule version stay verifiable.

  3. 03

    Exit strategies under DORA

    Critical paths are built so that a change of provider stays a project and does not mean starting over. Exit plans rest on architecture and evidence, not only on documents.

    System
    The business process is separated from the infrastructure that runs it; data lives in formats you can take with you.
    Human
    You identify which ICT services support critical or important functions. For each of them we show the way out.

  4. 04

    Complaints with deadlines

    Complaints arrive through several channels and come with response deadlines.

    Agent
    Classifies the complaint and drafts a reply for review.
    System
    Incoming complaints, responsibilities, deadlines and escalation run as a process with an audit trail.
    Human
    A case handler answers; escalations go to a person in charge.

* One process, end to end

KYC, step by step.

Illustrative flow. Thresholds, rules and systems are yours to set.

  1. 01 · ApplicationThe application is created and the process starts
  2. 02 · Read documentsIdentity and company documents, with the source of each value
  3. 03 · Check and evaluateSchema check, then a versioned rule
  4. 04 · ReviewA person completes the review task under their own identity
  5. 05 · Result and evidenceVersions, inputs, results and actors on record; evidence packages for later review
AgentHumanSystem

03 — Regulation

What applies, and what software can contribute.

Compliance is a property of your organization and its processes, not of a tool. Software can make the implementation easier or harder.

  • DORA

    Applies since 17 January 2025

    In short

    ICT risk management, incident reporting and management of ICT third-party risk. ICT services that support critical or important functions need an exit strategy, and contracts have to provide for exit and transition.

    What software can contribute

    Self-hosted operation, documented exit paths, cryptographically verifiable audit exports and tenant separation in the database.

  • EU AI Act

    High-risk obligations from 2 December 2027

    In short

    Assessing the creditworthiness of natural persons or establishing their credit score is a high-risk use (Annex III), with requirements including human oversight, documentation and transparency.

    What software can contribute

    A person decides; inputs, rule version and result are recorded with the decision.

  • Data Act

    Applies since 12 September 2025; no switching charges from 12 January 2027

    In short

    Cloud providers must enable switching to another provider or to your own infrastructure, with set notice and transition periods. From 12 January 2027 they may no longer charge for it.

    What software can contribute

    Whether your processes can move along is a question of architecture: processes that do not depend on the services of a single provider.

04 — Products

What we build it with.

All products are open source under Apache 2.0 and run on your own infrastructure.

  • Process Core

    Process platform for regulated software: self-hosted, verifiable audit exports, versioned and reconstructible execution

  • Edge AI Fabric

    Document AI on trusted Macs in your organization, end-to-end encrypted, Relay you can run yourself

Our service around it: Digital resilience — cloud exit, AI on-premise and on-edge, open-source strategy.

05 — Talk to us

Which process would have to keep running if your most important ICT provider failed tomorrow?

After that we talk about dependencies, evidence and where AI may prepare decisions.

Talk to an engineer ↗