Connects to the tools you use
Set up connections through ERP.AI and Proto workflows, with every change logged.
- Regulatory Reporting
- Source calculation
- Filing destination
- Evidence storage
- Identity source
Regulatory Reporting organizes a reporting entity’s control assessments and return packages around a defined period. A Control Owner records scope, the business unit and the controls under review.
Assessments in one list
| Record number | Subject | Status | Period start | Period end | Owner | |
|---|---|---|---|---|---|---|
| ASS-73714 | Q3 payment controls assessment | Review | 12 Oct | 21 Oct | Nadine Okoro | |
| ASS-67341 | 2026 customer disclosure review | Approved | 29 Oct | 07 Nov | Tessa Morgan | |
| ASS-26864 | Vendor oversight annual review | Review | 19 Oct | 26 Oct | Mariam El-Sayed | |
| ASS-79671 | Quarterly access control testing | Approved | 29 Oct | 04 Nov | Bilal Hussain | |
| ASS-71885 | 2026 incident response assessment | Review | 13 Oct | 15 Oct | Kenji Watanabe |
Independent Assurance Reviewer decides on the assessment revision.
Every feature works on the same records. Pick one to see the screen your team works in.
Set the reporting period, business-unit scope and test plan before work begins.
Assessments
| Record number | Subject | Status | Period start | Period end | Owner | |
|---|---|---|---|---|---|---|
| ASS-54186 | Q3 payment controls assessment | Draft | 30 Oct | 08 Nov | Kenji Watanabe | |
| ASS-54931 | 2026 customer disclosure review | Planned | 31 Oct | 09 Nov | Darius Cole | |
| ASS-62834 | Vendor oversight annual review | Testing | 04 Nov | 08 Nov | Adrian Solis | |
| ASS-72403 | Quarterly access control testing | Review | 02 Nov | 05 Nov | Eli Navarro | |
| ASS-38944 | 2026 incident response assessment | Approved | 24 Oct | 29 Oct | Bilal Hussain |
Connect branch risks to owned controls and their effective dates.
Assessment tests
| Parent | Control | Tested at | Sample size | Exception count | Result | |
|---|---|---|---|---|---|---|
| Vendor oversight annual review | Disclosure template approval | 15 Oct | 630 | 7 | Fail | |
| Data retention control review | Quarterly access certification | 19 Oct | 410 | 3 | Inconclusive | |
| Q3 payment controls assessment | Incident notification escalation | 12 Oct | 70 | 13 | Fail | |
| Q4 client file sampling | Quarterly access certification | 23 Oct | 880 | 6 | Inconclusive | |
| Vendor oversight annual review | Daily settlement reconciliation | 26 Oct | 800 | 29 | Fail |
Document samples, exceptions, results and evidence for each control test.
Approval conditions
| Parent | Control | Control code | Sample size | Exception count | Result | |
|---|---|---|---|---|---|---|
| Regulatory return readiness review | Closed record retention enforcement | CTL-SETTLE-01 | 90 | 3 | Pending | |
| 2026 incident response assessment | Return package independent review | CTL-DISC-02 | 540 | 33 | Pending | |
| Q3 payment controls assessment | Client file completeness check | CTL-VENDOR-03 | 120 | 29 | Pending | |
| 2026 incident response assessment | Incident notification escalation | CTL-ACCESS-04 | 600 | 39 | Pending | |
| 2026 incident response assessment | Vendor risk review | CTL-INCIDENT-05 | 90 | 37 | Pending |
Take a failed control test through assigned action and independent retest.
Approval conditions
| Finding | Owner | Due at | Completed at | Evidence | Status | |
|---|---|---|---|---|---|---|
| Expired file retained in archive | Mariam El-Sayed | 20 Oct | settlement-reconciliation.xlsx | Submitted | ||
| Client file lacks identity check | Kenji Watanabe | 22 Oct | disclosure-signoff.pdf | Submitted | ||
| Client file lacks identity check | Tessa Morgan | 25 Oct | vendor-review-pack.pdf | Submitted | ||
| Dormant user access not removed | Tessa Morgan | 15 Oct | access-certification.csv | Submitted | ||
| Return totals differ from ledger | Nadine Okoro | 29 Oct | incident-timeline.pdf | Submitted |
Prepare return packages linked to assessments and record review decisions.
Approval conditions
| Parent | Organization | Authority | Period end | Reported amount USD | Submission receipt | |
|---|---|---|---|---|---|---|
| Q3 payment controls assessment | Cedar Ridge Lending | State banking department | 18 Oct | 410 | REC-2026-09041 | |
| Regulatory return readiness review | North Quarry Finance | Payments oversight board | 18 Oct | 740 | REC-2026-09042 | |
| 2026 customer disclosure review | Stonepath Capital | Financial conduct office | 19 Oct | 680 | REC-2026-09043 | |
| Q4 client file sampling | North Quarry Finance | Consumer finance authority | 25 Oct | 230 | REC-2026-09044 | |
| Data retention control review | Cedar Ridge Lending | Privacy commissioner | 30 Oct | 290 | REC-2026-09045 |
Keep decisions, attachments and operation receipts tied to the assessment.
Operation receipts
| Parent | Operation key | Action | Expected revision | Result state | Occurred at | |
|---|---|---|---|---|---|---|
| Q3 payment controls assessment | return:q3:2026 | Create assessment | 70 | Failed | 20 Oct | |
| Regulatory return readiness review | review:disclosure:2026 | Record control test | 830 | Needs review | 20 Oct | |
| Regulatory return readiness review | test:vendor:2026 | Attach evidence | 700 | Failed | 31 Oct | |
| Q4 client file sampling | test:access:q4 | Approve remediation | 620 | Needs review | 13 Oct | |
| 2026 customer disclosure review | action:incident:2026 | Submit return | 200 | Failed | 04 Nov |
Assessment to reviewed return ships ready to use. 2 steps need a named approval before the work moves on: Review assessment (Independent Assurance Reviewer) and Review return (Independent Assurance Reviewer).
Set the entity, period and controls in scope.
Record samples, exceptions, results and evidence.
A separate reviewer decides on the tested revision.
Assign corrective work and document a retest.
An independent reviewer decides on the submitted package.
Check receipts and linked effects before closing the cycle.
Open any assessment to see its assessment tests, the roles that work on it, its process stages and its approvals on one page.
Period start, Period end, Owner and Revision.
Each line is linked to this assessment.
Admin, Control Owner and Control Tester, each with their own permissions.
Define scope and Confirm test plan, with the role that acts.
Review assessment and Review return, with who decides.
Review
| Parent | Control | Tested at |
|---|---|---|
| Vendor oversight annual review | Disclosure template approval | 15 Oct |
| Data retention control review | Quarterly access certification | 19 Oct |
| Q3 payment controls assessment | Incident notification escalation | 12 Oct |
The Reporting Analyst prepares the return, the Control Owner submits it, and an Independent Assurance Reviewer decides.
Signed in as Independent Assurance Reviewer
| Decision | Approver | |
|---|---|---|
| Review assessmentA separate reviewer decides on the tested revision. | Independent Assurance Reviewer | |
| Review returnAn independent reviewer decides on the submitted package. | Independent Assurance Reviewer |
Everyone opens Regulatory Reporting to the work that is theirs. Pick a role to see what it starts with.
Owns organization setup and access to the reporting workspace.
Defines assessment scope, owns controls and submits return packages.
This is the first screen this role sees.
Assessments · Control Owner
| Record number | Subject | Status | Period start | Period end | Owner | |
|---|---|---|---|---|---|---|
| ASS-16559 | Q3 payment controls assessment | Planned | 04 Nov | 08 Nov | Nadine Okoro | |
| ASS-77343 | 2026 customer disclosure review | Testing | 28 Oct | 04 Nov | Nadine Okoro | |
| ASS-17816 | Vendor oversight annual review | Review | 11 Oct | 20 Oct | Nadine Okoro | |
| ASS-94256 | Quarterly access control testing | Planned | 26 Oct | 03 Nov | Nadine Okoro | |
| ASS-63618 | 2026 incident response assessment | Testing | 16 Oct | 25 Oct | Lucia Bellini |
Documents sample-based tests and the evidence behind each result.
This is the first screen this role sees.
Assessments · Control Tester
| Record number | Subject | Status | Period start | Period end | Owner | |
|---|---|---|---|---|---|---|
| ASS-16559 | Q3 payment controls assessment | Planned | 04 Nov | 08 Nov | Nadine Okoro | |
| ASS-77343 | 2026 customer disclosure review | Testing | 28 Oct | 04 Nov | Nadine Okoro | |
| ASS-17816 | Vendor oversight annual review | Review | 11 Oct | 20 Oct | Nadine Okoro | |
| ASS-94256 | Quarterly access control testing | Planned | 26 Oct | 03 Nov | Nadine Okoro | |
| ASS-63618 | 2026 incident response assessment | Testing | 16 Oct | 25 Oct | Lucia Bellini |
Completes corrective work assigned to findings.
This is the first screen this role sees.
Findings · Remediation Owner
Makes assessment and return decisions and records independent retests.
This is the first screen this role sees.
Regulatory returns · Independent Assurance Reviewer
| Parent | Organization | Authority | Period end | Reported amount USD | Submission receipt | |
|---|---|---|---|---|---|---|
| Q3 payment controls assessment | Cedar Ridge Lending | State banking department | 18 Oct | 410 | REC-2026-09041 | |
| Regulatory return readiness review | North Quarry Finance | Payments oversight board | 18 Oct | 740 | REC-2026-09042 | |
| 2026 customer disclosure review | Stonepath Capital | Financial conduct office | 19 Oct | 680 | REC-2026-09043 | |
| Q4 client file sampling | North Quarry Finance | Consumer finance authority | 25 Oct | 230 | REC-2026-09044 | |
| Data retention control review | Cedar Ridge Lending | Privacy commissioner | 30 Oct | 290 | REC-2026-09045 |
Prepares the return package and checks its source assessment and receipt.
This is the first screen this role sees.
Regulatory returns · Reporting Analyst
| Parent | Organization | Authority | Period end | Reported amount USD | Submission receipt | |
|---|---|---|---|---|---|---|
| Q3 payment controls assessment | Cedar Ridge Lending | State banking department | 18 Oct | 410 | REC-2026-09041 | |
| Regulatory return readiness review | North Quarry Finance | Payments oversight board | 18 Oct | 740 | REC-2026-09042 | |
| 2026 customer disclosure review | Stonepath Capital | Financial conduct office | 19 Oct | 680 | REC-2026-09043 | |
| Q4 client file sampling | North Quarry Finance | Consumer finance authority | 25 Oct | 230 | REC-2026-09044 | |
| Data retention control review | Cedar Ridge Lending | Privacy commissioner | 30 Oct | 290 | REC-2026-09045 |
Answer reporting questions from assessments, tests, findings and returns.
This quarter
How far records got this quarter
| Stage | Reached | Step | |
|---|---|---|---|
| Draft | 34 | ||
| Planned | 16 | 47% | |
| Testing | 10 | 63% | |
| Review | 5 | 50% |
Sample totals per stage
Group assessment status by reporting period and organization.
Compare pass, fail and inconclusive results with sample size and exception count.
Show open and closed findings by severity and assessment.
List assigned actions by due date, owner and status.
Trace each finding to its independent retest result and evidence.
List returns by authority, period, revision, decision date and status.
Trace decisions and reviewers to the parent assessment revision.
List failed or needs-review receipts with operation keys and failure reasons.
See how Regulatory Reporting fits your kind of team.
Each stage of assessment to reviewed return names the role that acts and the status it records, so a change is never anonymous.
Each stage, the role that acts and the status it records
Use Proto to prepare records and surface decisions for the responsible people.
Set up connections through ERP.AI and Proto workflows, with every change logged.
Every record lives in a table you can see, extend and export. Add fields or whole tables in Proto.
Browse all 15 tablesStart with one team and one process, then add the rest once the basics are running.
Enter the organization, business units, team members and their user identities. Agree on currency, time zone and branch codes.
Record risks with the chosen scoring scale and controls with owners, effective dates and states.
Select a period, scope and planned tests; have a tester record samples, results and evidence.
Assign a corrective action for a finding and have a different reviewer record a retest.
Have the Reporting Analyst prepare a package for the same entity and period, the Control Owner submit it and the Independent Assurance Reviewer record the decision.
$0per user
The base account and everyday work in the ERP.AI app are free, for every user.
| Usage | Per $1 |
|---|---|
| Record reads (list, filter, get) | 20,000 |
| Search or aggregate queries | 4,000 |
| Record writes | 4,000 |
| Imported or synced records | 200,000 |
| Workflow runs | 2,000 |
| AI agent runs | 2,000 |
| Scheduled jobs or webhooks | 20,000 |
| File uploads (MB) | 2,000 |
| CSV or PDF exports | 100 |
Click Get started, then use Proto to configure Regulatory Reporting for your business. Start with one organization, one business unit, a reporting period and a control assessment. Rehearse a test, independent decision and return package before expanding the scope.
An assessment records the organization, business unit, period, scope statement, owner and planned tests. Its linked tests and decisions describe the work completed for that scope.
The tester links a test to an assessment and control, then records the tested date, sample size, exception count, result and evidence reference. Supporting files can be attached to the assessment.
A failed test can become a finding with severity, description and links to the same assessment and control. A named owner receives a corrective action, and an independent reviewer records a retest.
The Independent Assurance Reviewer records a decision and reason against the assessment revision. The team can identify the version that was reviewed if the scope later changes.
A return links to an organization and parent assessment. It carries authority, period end, reported amount in US dollars, submission receipt, revision, decision date and status.
Yes. The reporting team can correct the package, and the Control Owner can submit its new revision for another independent decision. Keep the earlier decision and its reason understandable.
Record attachments belong to an assessment. Each has a title, evidence type, uploader, upload date and internal or shared visibility.
Use the operation receipt's key, expected revision, result state, failure reason and effect references. Compare them with the records actually present before deciding the next action.
Operations Overview shows pending decisions, findings and failed operations. The working views also include Assessments in review, Actions submitted for verification and Returns awaiting decision.
Start free, then use Proto to change fields, steps and approvals before your team goes live.