BaFin & MaRisk AI Compliance
Purpose-built compliance for German financial institutions regulated by BaFin and MaRisk.
German fintechs, banks, and payment providers face specific AI governance requirements under BaFin's guidance of 18 December 2025 on ICT risks in the use of AI, which applies to entities subject to Articles 5 to 15 of DORA, and under MaRisk (AT 7.2, AT 8.2, AT 9, BT 3.2). Our platform is built for the German financial sector, covering the AI lifecycle the guidance addresses — data acquisition, model development and provision, ongoing operation, and retirement — with native German-language support and DACH-market expertise.
What We Deliver
Lifecycle ICT Risk Evaluation
Automated assessment across the AI lifecycle BaFin's guidance addresses: data acquisition, model development and provision, ongoing operation, and retirement — with performance, robustness, fairness, explainability, documentation and monitoring evidence captured at each stage.
Credit Scoring & Lending Compliance
Specialised compliance for financial AI in the areas Annex III lists — creditworthiness evaluation, and risk assessment and pricing in life and health insurance — including adverse action explanation generation. Whether a given system is high-risk also depends on the Article 6(3) assessment.
DORA & Vendor Risk Management
Digital Operational Resilience Act compliance with ICT vendor risk assessment, 24-hour/72-hour incident reporting, exit strategy documentation, and audit rights management (MaRisk AT 9).
German-Language Native Support
Full platform localisation in German (plus EN, FR, IT, NL) per EU AI Act Article 13 requirements, with BaFin-specific reporting templates and regulatory submission formats.
Key Outcomes
- check_circle Evidence aligned to BaFin's December 2025 guidance across the AI lifecycle
- check_circle MaRisk AT 7.2, AT 8.2, AT 9, and BT 3.2 requirement coverage
- check_circle DORA-compliant vendor risk management and incident reporting
- check_circle German-language compliance documentation ready for regulatory submission
Ready to Get Started?
Let us help you build AI systems that are ethical, compliant, and trustworthy. Schedule a consultation to discuss your needs.
Información de carácter general sobre los instrumentos citados, no asesoramiento jurídico, y no sustituye su propia vigilancia normativa. Que un sistema concreto entre en el ámbito de aplicación depende de sus circunstancias.