Sector
Gulf financial institutions
Central-bank expectations translated into evidence a reviewer can inspect.
CBUAE AI/ML Guidance Note — issued 11 February 2026
CBUAE Model Management Standards
Institution-specific outsourcing and data requirements
CBUAE Model Management Standards
Institution-specific outsourcing and data requirements
Primary source: CBUAE Rulebook, issued 11 February 2026. The instrument uses guidance language and is presented here as a supervisory expectation, not a penalty-bearing mandate.
The problem in one sentence
The CBUAE guidance expects governance, accountability, model inventory, fairness testing and third-party oversight, but a policy statement is not the same thing as action-level evidence.
Where it breaks
| Failure point | What actually happens |
|---|---|
| Inventory | A list of models does not show the agent action classes, tools, delegated authority and third-party dependencies that change the exposure. |
| Accountability | Board and senior-management accountability is difficult to evidence when authority is implicit in a shared service account. |
| Fairness and review | Testing has to survive model upgrades and connect to the customer-impacting decision, not stop at a generic model score. |
| Third parties | Audit rights and the ability to cease use are contractual promises until the architecture and exit path have actually been tested. |
Next step
If any of this is live for you
The fastest route is a conversation. Bring the architecture you are worried about — the first useful thing usually surfaces inside twenty minutes.