Branch self-assessment with a photo behind every check, two thirds of it done by agents before the walk, and a second person on every signature
Quarterly branch reviews with photo evidence, and every exception closed by a named owner.
See one case, screen by screen ↓Branch self-assessment is the scheduled review a branch manager runs of their own branch: cash and dual control, consigned items, new-account and BSA file samples, notices, record retention and the branch's part of the security program, with evidence. In Branch Self-Assessment, agents do the checks that live in systems before the walk, read every photo the manager takes, and follow each exception to closure, and a regional manager signs the review.
AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →
Updated
Every credit union and bank runs a branch self-assessment of each branch on a schedule: vault and teller cash, dual control, consigned items, samples of new-account (CIP) files, currency transaction reports and Regulation CC hold notices, record retention, and the branch's part of the security program. A credit union's president certifies that program to NCUA every year in the Credit Union Profile. Most branch audit checklists still live on paper or in a spreadsheet, and the branch manager fits the review between member appointments.
A tick proves little. "Vault log reviewed: yes" cannot show that one opening on October 9 has one set of initials, so internal audit re-checks at the branch and examiners write the same finding again. Half the review is pulling CIP files, CTRs and hold notices from document imaging and comparing them to the core screen by screen. Exceptions live in email and next quarter's checklist, and the security program report to the board is assembled once a year from every branch's paper.
Estimated split of the branch manager's hours on one quarterly review at the demo credit union, on paper and with the solution. Regional and internal audit follow-up, about 2 more hours on paper, is not included.
Seven agents do two thirds of each branch review from the systems and read every photo; the branch manager walks and the regional manager signs.
Cedar Hollow is branch 17 in the North region of Norrell Federal Credit Union, which reviews all 38 of its branches every quarter. Here is its fourth-quarter 2026 review, R-26Q4-17, screen by screen, in the working solution.
The Review planner builds the review from checklist Q4 2026 v7: 64 checks, 22 to walk and 42 from the systems. The Sampling agent pulls 18 samples: 5 of 61 new memberships, 3 of 9 CTRs, 4 of 27 Regulation CC exception hold notices and 6 retention records. The Cash agent reconciles the vault, 4 drawers, 212 official checks, 147 money orders and 38 gift cards to the teller platform and the general ledger, and the Security agent runs 11 checks from the security system.
What the agents may not do: pass a step under 85% confidence without a person, close an exception or sign a review, change a member record.
Seventeen of 18 samples pass. Hollis Brandvold's membership, opened September 14 by Ana Ferreira, has no ID expiration date in the core, while the imaged driver's license shows 03/14/2029. The imaged license sits beside the core record, with member details masked and every reveal logged. The agent prepares the correction; Ana enters it and the branch manager verifies it against the image.
“I cannot change the member record myself.”
Leah opens the review as four stages: prepared by the agents, the walk, exceptions and sign-off. When she starts the walk, the Review planner chooses drawer 3 for the surprise count, which nobody at the branch saw in advance. Drawer 3 counts $11,482.00 and the vault, counted by Leah and Jamal Price, $186,420.00, both equal to the teller platform.
“Tell me what to look at, let me take the picture, and don't make me type it up.”
On her phone, one check per screen, Leah photographs the vault access log. The Reading agent transcribes ten openings from October 8 to 22: nine have two sets of initials. The Security agent finds the alarm disarmed at 7:49 a.m. on October 9 by Kevin Doyle's code, the vault door open from 7:52 to 8:06, and nobody else badged in until 8:31 a.m. The vault balanced that evening at $201,860.00.
“Exception, 1 of 10 openings: October 9, 7:52 a.m. has one set of initials (K.D.). Nobody else entered the branch until 8:31 a.m.”
Leah agrees with the verdict. Exception EX-26Q4-17-01 opens as high and a repeat, because the vault was also opened by one employee on May 28. She owns it, due Monday, November 2. Teresa Vance, the Security Officer, is told the same day and sees it in the branch's 16 security program items, 11 of them checked from the security system.
If anything suggests an internal incident, the Security agent refers it to the Security Officer only; branch staff are never contacted by an agent.
The walk is finished: 62 of 64 checks passed. Both exceptions are on one page with their photos, owners and due dates: the vault opening (coach Kevin Doyle, collect a dual-control attestation from all 11 staff) and the missing ID expiration date, owned by Ana Ferreira and due Thursday, November 5. A fogged drive-up camera goes to facilities as an observation. Leah submits the review at 9:52 a.m.
Graham reads the agents' cited summary, both exceptions and the photos: the vault access log, the vault cash count, the drawer 3 surprise count and a camera still. 22 photos, 18 samples and 42 system checks are stored with the review for five years. He signs; Cedar Hollow is the 12th of 38 fourth-quarter reviews signed. Leah could not have signed it herself.
“Signed by the Regional Branch Manager, never by the person who performed it.”
The exception queue shows 21 open at 38 branches, 3 overdue and 3 repeats. The Follow-up agent reminds owners 3 days before the due date and escalates the day after. To close the vault exception, Leah proposes closure with a coaching note and the attestation; the agent checks 11 signatures against the staff list, and Graham or Teresa verifies and closes it.
The Follow-up agent never closes an exception; a second person does.
Nadia picks Cedar Hollow, step 6, vault dual control. She sees the stored photo without the agent's marks, so she judges it herself, then the original result: Reading agent v2.3, 96%, agreed by Leah Okafor at 9:04 a.m. Her conclusion, the same result or a disagreement with a reason, is recorded next to the original.
The Roll-up agent drafts the 2026 security program report to the Board of Directors from 125 signed reviews, every number linked to its evidence: exceptions down from 84 in the first quarter to 71 in the third, repeat findings from 14 to 6, 342 of 342 alarm tests recorded. Teresa Vance reviews it and Celeste Harmon approves. The Credit Union Profile certification draft goes to the President and CEO after the meeting.
The Roll-up agent never sends to the board and never certifies.
The same Cedar Hollow review, seen by the five people it passes through: what their quarter looked like, and what it looks like now.
Seven agents do two thirds of each branch review from the systems and read every photo; the branch manager walks and the regional manager signs.
Builds each review from the checklist version, sets sample sizes, picks the surprise teller drawer when the walk starts, and schedules the quarter around holidays and staffing.
Reads every photo taken on the walk, from handwritten logs to count sheets, notices and screens, transcribes it and gives a verdict with its confidence.
Pulls CIP files, CTRs, Regulation CC hold notices and retention records from document imaging and checks them against the core and the BSA reporting system.
Reconciles vault and drawer counts and consigned items (official checks, money orders, gift cards) to the teller platform and the general ledger.
Checks the branch's security program items from the security system: alarm and door events, badge entries, alarm tests, camera recording and retention, and training.
Proposes each exception's owner and due date, reminds, escalates at the due date, reads the closure evidence and flags repeat findings across quarters and branches.
Writes the quarterly roll-up, the annual security program report to the board and the Credit Union Profile certification draft, every number linked to its evidence.
Signs each review. The agents propose; a named person decides.
Ask about any branch, step, photo, sample or exception, or say what to do. Every answer points to its source.
Was the vault really opened by one person on October 9?
Yes, as far as the records show. The vault access log has one set of initials at 7:52 a.m. on Friday, October 9 (K.D.). The security system shows the alarm disarmed at 7:49 a.m. with Kevin Doyle's code, the vault door open from 7:52 to 8:06, and no other employee in the building until 8:31 a.m. The vault balanced that evening at $201,860.00. It is a repeat of May 28.
Which branches have repeat findings this year?
Three open repeat findings: Cedar Hollow, vault opened by one employee (October 9, after May 28); Stonegate, a combination not changed after a departure, 13 days overdue and escalated to Celeste Harmon; Riverbend, a teller drawer over its $15,000 limit. Across the credit union, repeats fell from 14 in the first quarter to 6 in the third.
What must we certify under 12 CFR 748, and are we ready?
Each year the President and CEO certifies compliance with Part 748 in the Credit Union Profile. The program must protect every office from robbery, burglary, larceny and embezzlement and keep member records secure, with a report to the board at least annually. The 2026 report is drafted from 125 signed reviews and 342 alarm tests; it waits for Teresa Vance, then Celeste Harmon.
Fix the missing ID expiration date for the September 14 membership
Hollis Brandvold's membership, opened September 14 by Ana Ferreira, has no ID expiration date in the core. The imaged driver's license shows 03/14/2029, and the record must include it. I have prepared the correction: Ana enters it in the core and you verify it against the image. I cannot change the member record myself.
13 screens from the working solution, on its sample data. Pick one to see it large.
Every rule the review runs on is a setting. The program manager proposes a change, the VP of Member Experience approves it, nobody approves their own, and it is live at all 38 branches from the next review.
| Setting | Default | Choose from |
|---|---|---|
| Checklist | Q4 2026 v7: 64 checks, 22 walked, 42 from the systems | Versioned: v5, v6 and v7 kept, and any two compared |
| Sample sizes per quarter | CIP 5 · CTR 3 · Reg CC exception notices 4 · record retention 6 | Set per sample; all of them if there are fewer |
| Surprise teller drawer | Chosen at random when the walk starts; never shown before | On · Off |
| Unannounced reviews | One per branch a year; dates kept from the branch | On · Off |
| Exception due dates by severity | High 10 days · medium 14 · low 30 | Set per severity; reminders 3 days before |
| Escalation | 1 day overdue to the regional manager; 10 days to the VP of Member Experience | On · Off; repeats to the Security Officer or the BSA Officer |
| Reading agent confidence | Under 85%: the person decides | Set per agent; the Sampling agent asks under 90%, the Cash agent accepts an exact match only |
| Retention and offline capture | Review evidence 5 years; photos encrypted on the phone until they sync | Legal hold overrides destruction · offline capture On · Off |
Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.
“demo” = seen in the working solution, on its sample credit union, branches and reviews · “target” = the design goal, measured in the live solution · “estimated” = our estimate of a branch manager's hours on one quarterly review at the demo credit union · “typical” = published rules (31 CFR 1010.306 on filing a CTR within 15 days; 31 CFR 1020.220 and 1010.430 on keeping CIP and BSA records five years; 12 CFR 748.0 and 748.1 on the credit union security program and its annual certification; 12 CFR 229.13 on Regulation CC exception holds; 31 CFR 1020.320(e) on SAR confidentiality). People, credit unions, branches, members and accounts named on this page are fictional: characters and sample data in the working solution.
Branch self-assessment is the scheduled review a branch manager runs of their own branch: cash and dual control, consigned items, new-account and BSA file samples, notices, record retention and the branch's part of the security program, with evidence. In Branch Self-Assessment, agents do the checks that live in systems before the walk, read every photo the manager takes, and follow each exception to closure, and a regional manager signs the review.
The one in the working solution, Q4 2026 v7, has 64 checks: 22 the manager walks with a photo each, from the vault access log to the cash counts and the notices, and 42 the agents run from the systems. Those cover CIP, CTR, Regulation CC and retention samples, cash and consigned items against the teller platform and general ledger, and alarm tests, cameras and user codes from the security system. The checklist is your own and versioned.
The manager photographs the vault access log. The Reading agent transcribes the last ten openings and their initials, and the Security agent checks each one against alarm, vault door and badge events, so the verdict says whether a second person was really there. The Cash agent adds whether the vault balanced that day.
Internal audit reads everything and can re-perform any step from the stored evidence: the photo without the agent's marks, the original verdict, the agent version and the person who agreed. Their conclusion is recorded next to the original, and export packs are built for the Supervisory Committee and NCUA examiners.
The Roll-up agent drafts the annual security program report to the board and the Credit Union Profile certification draft from every signed review, each number linked to its evidence. The Security Officer reviews it and the VP of Member Experience approves it; the agent never sends to the board and never certifies.
Yes. With offline capture on, photos are stored encrypted on a credit-union-managed phone and sync when there is signal. They go only into the review, never to the camera roll.
Yes. Agents propose and people decide: the manager agrees, disagrees with a reason code or retakes the photo, and under 85% confidence the person decides. The regional manager signs, a second person closes every exception and verifies every member record correction, and settings changes need a second approver.
The Agentic Solution Engine builds and deploys it from your requirements and documents, such as your branch audit checklist, sample sizes and escalation policy, and it goes live once every quality gate has passed. We will walk you through it on your own branches first.
Support needs recorded once, with consent, and followed on every channel.
1-min demoPolicy & Procedure ManagementEvery procedure a rule change touches is found and fixed before the rule takes effect.
1-min demoCall Compliance MonitoringEvery call and chat reviewed, not a sample, and each finding confirmed within a day.
1-min demoWe'll run Branch Self-Assessment on your own branch audit checklist and a sample of last quarter's reviews.