Regulayer / The 143 laws / Financial services
SR 26-2 / OCC Bulletin 2026-13
Model risk management. Supersedes SR 11-7 / OCC 2011-12.
Superseded on 17 April 2026.
Federal Reserve SR 26-2 and OCC Bulletin 2026-13 supersede and replace SR 11-7 (4 April 2011) and SR 21-8 (9 April 2021). Three points from the new text that change how this page should be read: the guidance is expressly non-enforceable, so non-compliance alone does not draw supervisory criticism; generative and agentic AI are outside its scope, and it reaches traditional statistical models and non-generative AI only; and it is stated to be most relevant to banking organisations with over $30 billion in total assets. Verified against the SR 26-2 attachment, 3 August 2026. The page below describes the superseded framework and is kept because the model-risk principles carried forward.
Model risk management.
Applies to: US banks.
What the signed record shows
Continuous validation evidence and a governance trail for bank models.
The proof is a signed, tamper-evident record. Anyone can check it, free, without an account, and nothing has to leave the building to make it. Evidence, not a promise.
On AI models. The agencies have said they will issue a separate request for information on AI and AI based models. As at 15 August 2026 that request for information has not been issued.
Citation: Development, validation, governance
