|  CASE STUDY · GENERATIVE AI · GOVERNED DRAFTING

How a compliance team stops treating AI drafts as a leap of faith

A financial services compliance function rolls out generative drafting for case narratives and regulatory responses. KnowledgeHub grounds every draft in cited, versioned sources, so reviewers check evidence instead of guessing where a sentence came from.

01

The trust gap

The pilot works. Drafting time drops. Then it stalls in the same place every generative AI project in a regulated function stalls: someone asks where a sentence came from, and there isn't a good answer.

A generated paragraph might be accurate. It might also be a fluent restatement of last year's policy, or a source that was superseded two ontology releases ago. Without a way to tell the difference, every draft needs the same manual check a human-written one would, which erases the time saved in the first place.

Legal and compliance don't block generative AI because they doubt what it can write. They block it because "trust me" isn't a standard a regulator will accept, and neither should it be.

02

Re-architecting the workflow

The fix isn't a better prompt. It's a retrieval layer underneath the generation that the output can't outrun.

KnowledgeHub sits between the request and the model. Before anything is generated, the relevant passages are retrieved from a versioned corpus — policy documents, prior case files, regulatory guidance — each one tagged with its source, ingestion date, and the ontology release that classified it.

Agents are given bounded tasks: retrieve, summarise, draft a specific section. They assemble a response with every claim linked to its source passage. Nothing reaches a reviewer without its citations attached, and nothing leaves the reviewer's desk without a human approval.

03

Inside the reviewer's day

A regulatory inquiry lands, and a response is due. The reviewer requests a first draft instead of starting from a blank page.

KnowledgeHub retrieves the passages relevant to the inquiry — internal policy, the specific regulatory guidance it responds to, and how a similar inquiry was handled eighteen months ago — and drafts a response with each claim cited inline.

The reviewer isn't reading blind. Three claims are flagged as weakly supported, where the retrieved passage is a partial match rather than a direct one. The reviewer checks those three, tightens the wording, and approves the rest as drafted.

What leaves the desk carries its full citation chain: which passage, which document version, which ontology release. Six months later, the same query against the same version returns the same answer.

04

What changed

Speed is the visible benefit. A citation chain regulators accept is the structural one.

The compliance function didn't have to choose between moving faster and staying defensible, the two turned out to depend on each other. A draft that cites its sources is also the draft that's fastest to approve, because the reviewer isn't reconstructing the reasoning from scratch.

Rollout expanded past the pilot team once legal could see, concretely, what "governed generation" meant in practice: not a promise, but a citation on every sentence.

“We stopped asking the model to be right and started asking it to show its work. That's the version we could actually approve for wider use.”

AI governance lead

Nordic financial services group

See how it works for your organisation

Request a confidential briefing — we show traceable retrieval and governance without exposing your data.