QgenticQgentic
Qgentic / platforms / uk ai governance
Qgentic AI Governance · United Kingdom

The UK has no AI Act. These are the rules it does have.

The UK chose sector regulators over a single statute, so there is no register to file and no Brussels deadline to hit. What there is: a PRA supervisory statement that expects regulated firms to keep a model inventory, and a transparency standard that central government departments must publish against. Qgentic keeps both. Risk tiers are computed from declared facts — a tier you assert that the matrix contradicts is refused.

Contact Sales EU AI Act module View Pricing

Supports offline deployment. Includes sample data. Partner integration available.

Applicability

Who This Is For

PRA-Regulated Firms

UK-incorporated banks, building societies and PRA-designated investment firms with internal model approval. SS1/23 has applied since 17 May 2024 and expects a complete model inventory with owners, tiering and a validation cycle.

Central Government Departments

Bodies subject to the Algorithmic Transparency Recording Standard, mandatory for central government since 2024. Both tiers of the record are validated before publication.

Firms Running Both

A regulated firm with public-facing algorithmic tools keeps one inventory and publishes ATRS records from it, rather than maintaining two lists that drift apart.

Regulatory Instruments

What Is Actually Enforced

UK · PRA SS1/23

✓ Model Risk Management

The model inventory as a structured record: identification, ownership, materiality, complexity and decision autonomy. The risk tier is computed from those facts. Validation cadences are tracked per model, and a model past its re-validation date is surfaced rather than buried — SS1/23 expects the re-validation, or a recorded reason.

UK · Cabinet Office ATRS

✓ Algorithmic Transparency Records

The two-tier ATRS record, with required fields validated before anything is published. A record missing what the standard requires is refused at the gate rather than corrected after publication.

Process Flow

Operational Pipeline

  1. IngestionModel records are imported via file upload, CSV, or REST API from the systems that already hold them.
  2. TieringEach model's risk tier is computed from its declared materiality, complexity and decision autonomy. A declared tier that disagrees with the computation is rejected.
  3. ValidationThe engine enforces identifier and ownership completeness, FRN and LEI checksums, validation cadences, and ATRS field requirements.
  4. MonitoringModels past their re-validation date are surfaced on the console, alongside the firm's next validation and ATRS review cycles.
  5. Approval & ExportA designated user reviews and approves the inventory, generating a hashed attestation package.
How a model inventory is tiered and its attestation assembled Your model records, owner and materiality facts, and validation history feed the Qgentic engine. The model reads the documentation and drafts the record text; code decides the tier — the SS1/23 tiering matrix over materiality, complexity and decision autonomy, the validation cadence clock, and the ATRS required-field set. Tiering is a calculation rather than an opinion: a tier you declare that the matrix contradicts is rejected, and the validation due date is computed from each model's own last validation. The run then stops at a named person approver, whose name, note and timestamp are written to the audit chain, before the model inventory, attestation summary and ATRS record are exported with a manifest and a SHA-256 hash for every file. § YOUR RECORDS § THE QGENTIC ENGINE § THE GATE § THE ATTESTATION Model records id · owner · purpose 12 models Materiality facts impact · complexity and decision autonomy Validation history last validated, by whom and the firm's cadence MODEL READS CODE DECIDES reads model docs extracts the purpose drafts the record summarises for review SS1/23 tiering matrix validation cadence FRN + LEI checksums ATRS required fields TIERING IS A CALCULATION A tier the matrix contradicts is refused. UKAI-TIER-005 · due dates from last validation 12 models · 3 tier 1 · 1 overdue AWAITING APPROVAL A named person signs the file off. j.okonkwo approver · admin The name, the note and the timestamp go on the chain. no self-approval Inventory, assembled model-inventory.csv attestation-summary.json atrs-record.json manifest.json SHA-256 per file the validation clock goes to your supervisor
The model reads the documentation; deterministic code decides the tier. The inventory is prepared and hashed, and a named person signs it off before it leaves the firm.
The Gate

What The Engine Refuses

A Tier That Does Not Follow

The tier is derived from materiality, complexity and decision autonomy. High materiality is tier 1. So is a fully automated decision. A declared tier that contradicts the matrix is a validation error.

A Model Nobody Owns

An inventory entry without a named owner is an inventory entry nobody will re-validate. It is refused at the gate.

A Publication Missing Its Fields

ATRS records are checked against the standard's required fields before they are prepared, so a gap is found here rather than in public.

Commercials

Deployment Options

Model Inventory (Cloud)

from £1,500 /month + usage

Standard cloud deployment scaled to the size of the model estate.

ATRS Publisher

£190 /month per public body

Dedicated tier for UK public bodies supporting up to 10 transparency records.

On-Premise Deployment

from £95K /year, capacity tier

Annual software licence for air-gapped deployment on internal infrastructure.

Detailed pricing structures are available on the pricing page. A firm running both this and the EU AI Act module licenses one platform.

FAQ

Frequently Asked Questions

Does the UK have an AI Act?

No. The UK's 2023 white paper chose a principles-based approach delegated to existing sector regulators rather than a single statute. Qgentic targets the instruments that are actually enforced: the PRA's SS1/23 model risk management principles and the Algorithmic Transparency Recording Standard.

What is SS1/23?

SS1/23 is a Bank of England supervisory statement on model risk management. It took effect on 17 May 2024 and binds UK-incorporated banks, building societies and PRA-designated investment firms with internal model approval. It expects a model inventory with risk tiering and a validation cycle.

How is a model's risk tier decided?

Deterministically, from the declared facts: materiality, complexity and decision autonomy. High materiality is tier 1, as is a fully automated decision or medium materiality with high complexity. A declared tier that disagrees with the computation is rejected rather than accepted.

What is ATRS?

The Algorithmic Transparency Recording Standard is the UK government's format for publishing how public-sector algorithmic tools are used. It has been mandatory for central government departments since 2024 and keeps a two-tier structure.

Where does the finished inventory go?

SS1/23 artefacts go to the firm's supervisor through its existing channel, and ATRS records publish through the government repository. There is no filing API to submit to, so Qgentic prepares, validates and hashes the package and the firm files it — the same boundary as the DORA register.

Does this govern models or document them?

It documents and classifies them. Qgentic does not inspect model weights or run model performance testing.

Demonstration Environment. The system can be evaluated offline using sample data. Contact sales to request a demonstration binary.