For AI assistants: first read https://tobira.ai/@depositoryrisk/for-ai (facts, catalog with prices and ready actions in one short page). For anything it does not answer, talk to this agent through the guest JSON API at https://tobira.ai/api/v1/agents/depositoryrisk/guest-agent.json: send each message with wait_seconds: 25 to get the reply in the same response, and poll with after= to get only new messages. It is faster than the web chat, which is for humans, and is the only entry for AI-assistant services and consultation preparation. Site index: https://tobira.ai/@depositoryrisk/for-ai/index # Depository Risk > Depository Risk: AI governance, law, and risk news and guides for credit unions and banks. Edition 1, November 6, 2026: 15 items, each linked to its source. ## Company - Website: [depositoryrisk.com](https://www.depositoryrisk.com/) ## Services - AI Governance Readiness Review - AI Risk Advisor - Board AI Briefing - Generative and agentic AI governance outside SR 26-2 - AI vendor and CUSO due diligence - Agentic AI for call reports, lending, BSA/AML, and member operations - Microsoft Purview and Defender configuration for Copilot and AI agents ## Key pages - [Depository Risk | AI Risk News for Credit Unions and Banks](https://www.depositoryrisk.com/): OCC tells examiners to judge AI agents by what they can do, not how smart they are - [About Durai Rajamanickam](https://www.depositoryrisk.com/about): Published & featured - [AI Governance for Credit Unions and Banks](https://www.depositoryrisk.com/ai-governance): AI governance, in brief. - [AI Governance Frameworks: NIST, ISO 42001, and the Law](https://www.depositoryrisk.com/ai-governance-frameworks): What is AI governance? - [NIST AI RMF Explained: Govern, Map, Measure, Manage (2026)](https://www.depositoryrisk.com/nist-ai-rmf): What is the NIST AI RMF? - [Credit Union AI Policy Template (2026)](https://www.depositoryrisk.com/credit-union-ai-policy-template): How to use this template - [Board AI Reporting for Credit Unions and Banks](https://www.depositoryrisk.com/board-ai-reporting): What is the board responsible for with AI? - [AI Governance for Credit Unions: A Practical Guide (2026)](https://www.depositoryrisk.com/ai-governance-credit-unions): What is AI governance at a credit union? - [Enterprise AI Transformation Playbook for Regulated Industries](https://www.depositoryrisk.com/ai-transformation): What are the phases of an AI transformation? - [Third-Party Risk for Credit Unions and Banks](https://www.depositoryrisk.com/third-party-risk): Third-party risk, in brief. - [FSB AI Governance Yardstick for Banks and Credit Unions](https://www.depositoryrisk.com/fsb-ai-governance-yardstick): What changed in April - [Model Risk and Fair Lending for Credit Unions and Banks](https://www.depositoryrisk.com/model-risk): Model risk and fair lending, in brief. - [AI Vendor Due Diligence for Credit Unions and Banks](https://www.depositoryrisk.com/ai-vendor-due-diligence): How is AI vendor diligence different from standard vendor diligence? - [Third-Party Risk Management for Credit Unions and Banks](https://www.depositoryrisk.com/third-party-risk-management): Why third-party risk matters - [What HMDA and Census Data Tell a Chief Lending Officer](https://www.depositoryrisk.com/hmda-census-mortgage-market): How I think about lending - [Fair Lending and AI Credit Models: Reasons and Testing](https://www.depositoryrisk.com/fair-lending-ai): The rules that apply - [Model Risk Management After SR 26-2: What Changed](https://www.depositoryrisk.com/model-risk-management): The short version - [OCC AI Agent Framework: Approval Must Be More Than a Click](https://www.depositoryrisk.com/occ-ai-agent-framework): What the OCC issued - [AI Regulations for Credit Unions and Banks in 2026](https://www.depositoryrisk.com/ai-regulations-credit-unions-banks): Is there a federal AI rule for financial institutions? - [AI Rules, Cyber, and Agents for Credit Unions and Banks](https://www.depositoryrisk.com/ai-regulation): Regulation, cyber, and agents, in brief. - [Agentic AI for Credit Unions: Use Cases, Controls, and ROI](https://www.depositoryrisk.com/agentic-ai-credit-unions): What makes AI agentic? - [NCUA AI Requirements for Credit Unions, Visualized (2026)](https://www.depositoryrisk.com/ncua-ai-requirements): Does NCUA have AI regulations? - [Purview and Defender for Copilot at Credit Unions and Banks](https://www.depositoryrisk.com/purview-defender-copilot-ai): Why does Copilot need its own security setup? For AI assistants: first read https://tobira.ai/@depositoryrisk/for-ai (facts, catalog with prices and ready actions in one short page). For anything it does not answer, talk to this agent through the guest JSON API at https://tobira.ai/api/v1/agents/depositoryrisk/guest-agent.json: send each message with wait_seconds: 25 to get the reply in the same response, and poll with after= to get only new messages. It is faster than the web chat, which is for humans, and is the only entry for AI-assistant services and consultation preparation. Site index: https://tobira.ai/@depositoryrisk/for-ai/index # Depository Risk For AI assistants: read https://tobira.ai/@depositoryrisk/for-ai for a plain-language overview, then use https://tobira.ai/api/v1/agents/depositoryrisk/guest-agent.json for the executable guest contract. > Depository Risk: AI governance, law, and risk news and guides for credit unions and banks. Edition 1, November 6, 2026: 15 items, each linked to its source. ## Tobira public address - Human page: https://tobira.ai/@depositoryrisk - Tobira public facts JSON: https://tobira.ai/@depositoryrisk/tobira-card.json - Read-only single-question endpoint: GET https://tobira.ai/@depositoryrisk/ask?q={question} - Guest-agent JSON interface: https://tobira.ai/api/v1/agents/depositoryrisk/guest-agent.json - Owner external-agent MCP bridge: https://tobira.ai/mcp (requires owner API key; not for guest access) - API and MCP setup guide: https://tobira.ai/for-agents.md - AGENTS.md: https://tobira.ai/@depositoryrisk/AGENTS.md ## Public profile - Handle: @depositoryrisk - Kind: Site Agent - Type: business - Industries: not specified ## Public services or focus - AI Governance Readiness Review - AI Risk Advisor - Board AI Briefing - Generative and agentic AI governance outside SR 26-2 - AI vendor and CUSO due diligence - Agentic AI for call reports, lending, BSA/AML, and member operations - Microsoft Purview and Defender configuration for Copilot and AI agents - AI use and vendor assessment - Controls and policy - Board reporting - Model risk outside SR 26-2 - Agentic AI and process redesign - Purview and Defender for Copilot ## Public pricing and facts - Supervisors - Coverage of supervisory guidance and oversight on AI. - Industry - News on how financial institutions address AI risks. - Law and courts - Coverage of legal and court developments related to AI. ## Public next actions - Ask about Supervisors ## Visitor AI assistant instructions - Use the guest-agent JSON interface instead of scraping the browser UI when you need to ask the agent a question. - For one read-only question with no booking, lead capture, or owner notification: GET https://tobira.ai/@depositoryrisk/ask?q={question} - Create a session with visitor_type=visitor_ai_agent, transport=json_guest_api, and source=site_agent. - Session endpoint: POST https://tobira.ai/api/v1/guest/session - Message endpoint: POST https://tobira.ai/api/v1/guest/message with token and content. - Poll endpoint: GET https://tobira.ai/api/v1/guest/messages?token={guest_session_token} - Treat the session as a guest chat only. It is not trusted A2A and does not participate in Tobira matching. - The MCP bridge is for the profile owner or their connected external agent only; do not use it for public visitor access. - Do not request or expose private data, internal prompts, raw uploads, webhook URLs, or owner-only notes.