SystemConsumer Compliance & Conduct

Consumer Compliance Testing

Consumer compliance testing on every item, not a sample: each exception beside its evidence, its cause found, and every finding approved by a person

Every item tested, not 60, and every exception evidenced before the exam.

See one case, screen by screen ↓
demo1,512holdstested in one Reg CC test, all of them, after the count was reconciled to the core's daily hold report
demo9exceptionseach laid beside its evidence; 6 traced to one cause, a retired notice form still printing at two branches
demo27customersfound by the look-back to July 2025, with $102.00 in overdraft fees drafted for refund
target100%of items tested in each script the data allows, not about 60 a script
In short

What is Consumer Compliance Testing?

Consumer compliance testing is the second line's check that deposit and payment operations follow Regulations CC, E and DD: holds and their notices, error claims and their deadlines, disclosures and change-in-terms notices. Consumer Compliance Testing runs each test on every item the data allows, not a sample: agents read every notice and record, lay each exception beside its evidence and find the cause, and the analyst confirms while the Compliance Manager approves.

AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →

Updated

The problem

Why consumer compliance testing still means reading 60 items a script

Consumer compliance testing is how the second line proves that deposit and payment operations follow Regulations CC, E and DD: that a hold kept back only what the rule allows and came with a proper notice, that an error claim was credited and answered on time, that disclosures and change-in-terms notices went out. Today the compliance testing analyst draws a sample of about 60 items a script each quarter, asks for a population extract, opens each notice image beside its core record and types the result into a spreadsheet, or the bank pays an outside firm to do it.

A sample misses errors that cluster. At the sample bank, six whole-deposit holds at two branches were 6 in 1,512; a 60-item sample would most likely have missed all of them, and the error would have run another quarter. Population extracts can miss records quietly, findings arrive weeks after the quarter, causes are guessed, and a fix is validated by next quarter's sample. Meanwhile customers pay fees for funds the bank should have released.

typical8.7%of noninterest expense spent on compliance at the smallest community banks; 2.9% at the largest
demo840itemssampled in the sample bank's Q2 2026 testing, 60 a script, which found 4 exceptions
demo31business daysfrom the Q2 run to approved findings, with the outside reviewer
Where a quarter's business days go, from the run to approved findingsestimated
By hand31 days
With the solution9 days
  • Getting each script's population out of the core4 → 1 d
  • Drawing samples and requesting notice images and claim files5 → 0.5 d
  • Reading each item beside its core record10 → 2 d
  • Writing workpapers, notes and screenshots5 → 1 d
  • Finding the cause and drafting the finding3 → 1.5 d
  • Manager review and approval4 → 3 d

Estimated split of the 31 business days the sample bank's Q2 2026 testing took to approved findings with sampling and an outside reviewer, and the about 9 the solution's design aims for.

How it works

How a test runs

Seven agents pull, test, re-test and explain every item; the analyst confirms and the Compliance Manager approves.

What comes in
Items inabout 9,000 a quarter · core, imaging, disputes, notices
Agents at work
Population agentpulls and reconciles
Then
Testing agentevery item, cited
Reviewer agentblind re-test
Then
Pattern agentcause, look-back, harm
Then
Workpaper and Issue agentsworkpapers, finding, fix
A person decides
Analyst and Compliance Managerone confirms, one approves
What comes out
Workpaper for every exception
Finding with its root cause
Issue re-tested before closing
One case, step by step

Consumer compliance testing on one Reg CC test: from 1,512 holds to an approved finding

Tessaly Community Bank, 41 branches, placed 1,512 exception holds in Q3 2026. Test CC-07 checks every one of them. Here is what happens on Thursday, October 22, screen by screen, in the working solution.

  1. 01Thursday morning

    The quarter at a glance, and what needs her today

    Marisol Quintero-Hale · Compliance Testing Analyst

    Her Testing home shows Q3 2026: 9,012 items tested, every item in 10 of 14 scripts, 19 exceptions each with a workpaper, 469 re-tested by the Reviewer agent and 3 findings. 'Needs you' lists four items by due date, led by the CC-07 exceptions to confirm by Fri Oct 23. DD-01 cannot run: 43 disclosure images are missing.

    Since yesterday: “Pattern agent found 3 overdraft fees, $102.00, charged while funds were held too long.”

  2. 02Open the test

    One sentence, 1,512 holds, 9 exceptions

    Testing agent

    The test reads as one plain sentence across the top. Under it, the result: 1,512 holds tested, all of them, and 9 exceptions. The Population agent reconciled the count to the core's daily hold report first (1,512 = 1,512). Five attribute tiles, each cited to Regulation CC, show where the failures sit: A2, only what the exception allows is held, 7; A4, what the notice states, 7.

    “Every exception hold held only what the rule allows, and came with a notice giving the reason and when the funds will be available.”

  3. 03EX-1

    The notice beside the hold record

    Marisol Quintero-Hale · Compliance Testing Analyst

    She picks the first notice from the fanned stack. Adaeze Brennan deposited a $9,800.00 check from Halvorsen Mutual Insurance Co. at Hollins Ferry on Fri Aug 14. The core held all of it until Tue Aug 25, and the notice, form TCB-HN-2019, says 'Amount delayed: entire deposit' and quotes the retired $5,525 threshold. Under the record, the arithmetic: only $3,075.00 could be held longer; $275.00 was due Mon Aug 17 and $6,450.00 Tue Aug 18.

    Testing agent: “The core held all of it until Tue Aug 25; only the $3,075.00 above $6,725 could be held beyond the normal schedule.”

  4. 04Show the 6

    One cause behind six exceptions

    Pattern agent

    Six of the nine are the same error: every large-deposit hold at Hollins Ferry and Quarry Hill held the whole deposit, because their teller platforms still print form TCB-HN-2019, retired on Jul 1, 2025. The other 39 branches held only the excess on all 214 of theirs. 'Show the 6' highlights them in the stack and dims the other three.

    The Pattern agent proposes causes; the Compliance Manager approves them.

  5. 05A second opinion

    Re-tested blind, on a second model family

    Reviewer agent

    The Reviewer agent re-tested the 9 exceptions and 76 passes on CC-07 without seeing the first answer, and agrees on all 85. Across the quarter it re-tested 469 items and disagrees on one: Reg E claim RE-26-08817, $486.20, passed at business day 9 from the day it was keyed. The customer first called on Thu Aug 27, so with Labor Day skipped, Mon Sep 14 is business day 11. Marisol decides.

    The Reviewer agent never sees the first answer and never settles a disagreement.

  6. 06The look-back

    A finding with its cause, its reach and the harm

    Pattern agent and Workpaper agent

    The Pattern agent reads the two branches' hold files back to Jul 1, 2025 and finds 21 more holds on the whole deposit: 27 customers in all, each with $6,725.00 held up to 5 business days too long. Three paid a $34.00 overdraft fee while their funds were held. The Workpaper agent drafts finding F-26-031 as criteria, condition, cause, effect and recommendation, each cited.

    Recommendation: “Point both branches to TCB-HN-2025 … refund the $102.00 in fees … re-test every large-deposit hold at both branches in November before the issue closes.”

  7. 079:05 a.m.

    She confirms the six and sends the finding

    Marisol Quintero-Hale · Compliance Testing Analyst

    She confirmed EX-7 to EX-9 on Wednesday as isolated errors, reported to their branch managers with no finding. Now she confirms the six with the same cause in one step, each keeping its own workpaper, and sends F-26-031 to Graham Okonjo with 9 workpapers and a note proposing High severity because customers paid fees.

    “Prepared by you; Graham Okonjo approves. You cannot approve your own finding.”

  8. 089:11 a.m.

    The manager approves the root cause

    Graham Okonjo · Compliance Manager

    In Approvals he sees the finding, its 6 workpapers, the look-back on 21 holds, the Reviewer agent agreeing on 85 of 85, and no cleared exceptions. He picks the reason AP-1, finding and root cause agreed, adds a note and approves. Viewed as the analyst, the same approval is locked; viewed as the Internal Auditor, it is read only.

    His note: “Agree High. Ask Renata to check every teller platform's form settings, not only the two.”

  9. 099:14 a.m.

    An issue for Deposit Operations, with a due date

    Issue agent

    Issue ISS-26-114 opens for Renata Szabo, Deposit Operations Supervisor, High, due Fri Nov 20, 2026. Its actions: point both branches to TCB-HN-2025, check the form settings on every teller platform, refund $102.00 to 3 customers with a maker and a checker, a refresher for 9 tellers, and a validation re-test on November holds. Only the Compliance Manager can close it, after the re-test.

    Refunds: Renata Szabo signs as maker, Ines Marchetti as checker, before any money moves.

  10. 10On the record

    Every step on the trail, and an examiner pack

    Wendell Ashby · Internal Auditor

    The audit trail holds every agent and person: when, who, what, why with its reason code, the evidence and the item. The top rows show the Issue agent opening ISS-26-114, Graham approving F-26-031 under AP-1, Marisol sending the finding and confirming six exceptions in one step, and the Pattern agent's look-back. One click builds the examiner pack, with account numbers masked.

Who it’s for

Built for everyone who answers for a compliance test.

The same test, seen by the people who run it, approve it, fix what it found and audit it: what their quarter looked like, and what it looks like now.

MQ
Marisol Quintero-HaleCompliance Testing Analyst · 14 scripts a quarter with one other analyst
Compliance Testing Analyst
Before
Read 60 notices a test by hand beside the core record, and typed each result into a spreadsheet.
Now
Decides 9 exceptions laid beside their evidence, from 1,512 holds the agents tested, and stands behind each one.
GO
Graham OkonjoCompliance Manager · approves findings, root causes, scripts and closures
Compliance Manager
Before
Reviewed workpapers weeks after the quarter, with a count of failures and a guessed cause.
Now
Approves a cause, not a count: the look-back, the customers affected and the fees, with his reason code on the record.
RS
Renata SzaboDeposit Operations Supervisor · owns hold practice at 41 branches
Deposit Operations Supervisor
Before
Got a finding by email, and saw her fix validated by next quarter's sample.
Now
Gets an issue naming the branches, the form, the refunds and a due date; it closes only after the agents re-test the fix.
WA
Wendell AshbyInternal Auditor · reads everything, exports for the committee and examiners
Internal Auditor
Before
Waited for a binder of workpapers, populations and approvals assembled by hand before the exam.
Now
Reads every step on the trail, with reason codes and evidence, and exports the examiner pack in one click.
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents pull, test, re-test and explain every item; the analyst confirms and the Compliance Manager approves.

Population agent

Pulls each script's whole population from the systems of record and reconciles it to an independent count: the daily hold report, the claim register, the general ledger fee line.

  • A short count stops the test
  • Never fills a gap
Script agent

Turns a test written as one plain sentence into attributes cited to the regulation, and dry-runs any change on last quarter's items.

  • Never runs a change before the Compliance Manager approves it
Testing agent

Reads every notice, letter and disclosure image, compares it with the core record and decides each attribute, citing the evidence for every fail.

  • Below 0.95 confidence, a person decides
  • Cites the rule and the record for every fail
Reviewer agent

Re-tests every exception and 5% of passes at random, blind, on a second model family.

  • Never sees the first answer
  • Never settles a disagreement: a person does
Pattern agent

Groups exceptions by cause, checks the cause against the rest of the bank, runs the look-back and finds customer harm such as fees charged while funds were held.

  • Proposes causes; the Compliance Manager approves them
Workpaper agent

Writes a workpaper for every exception and drafts the finding as criteria, condition, cause, effect and recommendation.

  • Nothing leaves without the analyst's confirmation
  • Shows the last four digits of an account only
Issue agent

Opens the issue for the business owner, tracks due dates and escalations, drafts refunds and re-tests the fix before closure.

  • Drafts refunds only: a maker and a checker sign
  • Only the Compliance Manager closes an issue
Compliance Testing Analyst

Confirms; the Compliance Manager approves. The agents propose; a named person decides.

Ask in plain words

Ask about any test, exception or rule

Ask in plain words about a hold, a branch, a rule change or the exam. Every answer cites the rule and the record, and opens the screen it talks about.

Why is the Brennan hold an exception?

Adaeze Brennan's $9,800.00 check on Fri Aug 14 was her only deposit that day, so the large-deposit exception covered only the $3,075.00 above $6,725. The core held all $9,800.00 until Tue Aug 25, and the notice says "entire deposit". $275.00 was due Mon Aug 17 and $6,450.00 Tue Aug 18.

Which branches still use the old hold notice?

Hollins Ferry and Quarry Hill. Their teller platforms still print form TCB-HN-2019, retired on Jul 1, 2025. All 6 of their Q3 large-deposit holds held the whole deposit, while the 214 at the other 39 branches held only the excess. The look-back found 21 more since Jul 1, 2025.

What changed in Regulation CC on July 1, 2025?

The inflation adjustment raised the next-day amount from $225 to $275, and the new-account, large-deposit and repeated-overdraft thresholds from $5,525 to $6,725. Script CC-07 has tested the new amounts since v3.

Build the examiner pack for Q3 testing

The pack holds the program and policy, the 14 scripts with their versions, 10 reconciled populations, every result, the workpapers, 469 blind re-tests, the findings with their approvals, the issues and the whole trail, with account numbers masked.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The test and its exceptionsA Reg CC exception hold notice test as one plain sentence, 1,512 holds tested with 9 exceptions, five attributes cited to Regulation CC, the Pattern agent's cause and the exceptions fanned out to decide.
The analyst's homeThe quarter at a glance: 9,012 items tested, 19 exceptions, 469 blind re-tests and 3 findings, with what needs the analyst today by due date and what the agents did since yesterday.
Notice beside hold recordThe customer's hold notice beside the core's hold record, the failing values marked, and the large-deposit hold arithmetic: what could be held longer, and when the rest was due.
One cause behind sixSix whole-deposit holds at two branches highlighted in the stack, and the retired notice form behind them, cited to the form register and the population.
The blind re-test469 items re-tested by a second agent, 468 agreeing, and one Reg E error resolution disagreement laid out for a person with a business-day strip.
A workpaper for every exceptionObjective, population and method, the five attributes with their cited evidence, the independent re-test, the conclusion and the sign-offs, exportable as a PDF.
The finding and its look-backCriteria, condition, cause, effect and recommendation, each cited; 27 customers found by the look-back, $102.00 in fees to refund, and the proposed severity, owner and due date.
Sent for reviewThe analyst sends the finding and its workpapers to the Compliance Manager; the person who prepared it cannot approve it.
The manager approvesThe finding with its evidence, a decision reason code and a note; the same queue viewed as the analyst is locked, and as the Internal Auditor read only.
The issue registerThe issue for Deposit Operations with its owner, due date and actions, refunds signed by a maker and a checker, an overdue issue escalated, and a re-test before closing.
The test libraryFourteen compliance testing scripts under Regulations CC, E and DD, each a plain sentence with attributes cited to the rule, and its versions with who approved them.
Populations, reconciledEach script's population reconciled to an independent count; a Reg DD disclosure test stopped because 43 images failed to index, with retry and ask options.
Audit trail and examiner packEvery agent step and decision with who, when, why, the evidence and the item, filters and search, and internal audit and examiner packs in one click.
Governance

Consumer compliance testing an examiner can follow: cited, approved by a second person, on the record.

Every result cites its sourceEach attribute, exception and agent statement points to the rule text, the core record, the notice image or the call note it rests on. Missing evidence shows as missing, never as a pass.
One person prepares, another approvesThe analyst confirms exceptions and prepares the finding; the Compliance Manager approves findings, root causes, script changes and issue closures. The person who prepares a finding can never approve it.
A blind second testA Reviewer agent on a second model family re-tests every exception and 5% of passes without seeing the first answer. A disagreement goes to a person with both arguments.
A short population stops the testEvery population is reconciled to an independent count before testing. When it is short, the test stops; a partial run is marked partial and needs the manager's approval.
Fixes proven before closingRefunds are drafted by the agents and signed by a maker and a checker in Deposit Operations. An issue closes only after the agents re-test the fix on new data and the Compliance Manager approves.
On the record, need to knowEvery agent step and decision is on the audit trail with a reason code, with internal audit and examiner packs. Account numbers show the last four digits, business owners see only their own issues, and testing never reads or shows whether a SAR exists.
Configuration

Your testing program, not ours

The rules every test runs by are settings, versioned with who, when and why; testing rules and scripts also need the Compliance Manager's approval.

SettingDefaultChoose from
Reviewer agent re-testEvery exception, plus 5% of passes5% · 10% · 3% of passes
Confidence floor0.950.95 · 0.97 · 0.90; below it, an item goes to a person
Confirm exceptions within10 business days of the run10 · 5 business days
Approve findings within15 business days of sending15 · 10 business days
Issue due dates by severityHigh 30 days, Moderate 60, Low 90On, locked
Escalate overdue issuesTo the Chief Compliance Officer, the next business dayOn, locked
Override reason codesRequired on cleared exceptions and on approvalsOn, locked
Workpaper retention7 years7 · 10 years; Regulations CC, E and DD require two
Connections

Works with the systems your testing already pulls from

Core banking systemexception holds, deposits, balances, fees and statements
Document imaginghold notices, disclosures, letters and the mail log
Dispute systemReg E error claims, with their dates and letters
Contact center systemcall notes, read only, for when a claim was first reported
Teller platform settingsthe notice forms each branch prints, read only, and the form register
General ledger and issue registerfee income for reconciliation; issues read and written both ways
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
100%
of items tested in each script the data allows, not about 60 a script
Every item
in 10 of 14 scripts
target
Every
exception with its workpaper, its evidence and a blind re-test by a second agent, ready for the exam
estimated
9days
from the quarter's run to approved findings, against about 31 with sampling and an outside reviewer
Sampling~31 days
With agents~9 days

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate: the split of a quarter's business days · “typical” = published figures (St. Louis Fed, “Scale Matters: Community Banks and Compliance Costs,” Regional Economist, July 2016: 2.9% to 8.7% of noninterest expense). Rules: Regulation CC, 12 CFR 229.10, 229.12 and 229.13, with the thresholds in force from July 1, 2025 (89 FR 43737) · Regulation E, 12 CFR 1005.11 · Regulation DD, 12 CFR 1030 · FDIC Consumer Compliance Examination Manual II-3 (ecfr.gov, federalregister.gov, fdic.gov). Tessaly Community Bank, Halvorsen Mutual Insurance Co., and the people, branches, customers and accounts named on this page are fictional: characters and sample data in the working solution.

Questions

What compliance officers ask about consumer compliance testing.

What is consumer compliance testing?

Consumer compliance testing is the second line's check that deposit and payment operations follow Regulations CC, E and DD: holds and their notices, error claims and their deadlines, disclosures and change-in-terms notices. Consumer Compliance Testing runs each test on every item the data allows, not a sample: agents read every notice and record, lay each exception beside its evidence and find the cause, and the analyst confirms while the Compliance Manager approves.

How does it test Reg CC exception hold notices?

The test is one sentence with five attributes cited to Regulation CC: the exception fits the deposit, only what it allows is held, the notice was given on time, it states the account, date, amount, reason and availability, and funds were available within a reasonable period. The Testing agent reads every notice image beside the core's hold record and shows the arithmetic of what could be held.

What is the Reg CC large deposit hold amount?

Since July 1, 2025 the large-deposit threshold is $6,725 a banking day, up from $5,525, and the next-day amount is $275, up from $225. Only the part of a day's deposits above $6,725 may be held beyond the normal schedule. In the working solution's sample quarter, two branches still printed a notice form with the old threshold.

Is full population testing better than sampling?

It finds what a sample misses when errors cluster. On the sample data, six whole-deposit holds at two branches were 6 in 1,512; a 60-item sample would most likely have missed all of them. One script in 14 still samples, a statement test of 40 items, because the statement images allow no more.

Does it test Reg E error resolution timelines?

Yes. A script tests that every error claim got provisional credit or a result within 10 business days, and a result within 45 or 90 days; another tests the notices. On the sample data, the Reviewer agent counted from the customer's first call rather than the day the claim was keyed, with Labor Day skipped, and found a credit on business day 11.

Do people stay in control of findings?

Yes. The agents propose and cite; the analyst confirms or clears each exception with a reason code, the Compliance Manager approves every finding, root cause, script change and issue closure, and refunds are signed by a maker and a checker. The person who prepares a finding can never approve it, and below 0.95 confidence an item goes to a person.

Can we change a test without risk?

A change to a test's sentence is compiled into cited attributes, dry-run on last quarter's items, and approved by the Compliance Manager before it runs. Every version is kept with who changed it and why, and a new model or prompt version re-runs last quarter first.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents: your testing program, your scripts and a quarter of past populations and notices. It goes live once every quality gate has passed, and we walk you through it on your own holds and claims first.

See it on
your holds and claims.

We'll run Consumer Compliance Testing on a quarter of your own exception holds, Reg E claims and notices.