Branding and sector packs
Sector packs
Chosen on the New assessment page. A pack adds sector context to the scenario and a list of frameworks for the Compliance agent to consider; the agent decides applicability and every item must be verified.
| Pack | Context | Frameworks to consider |
|---|---|---|
| Banking and lending (Australia) | APRA-regulated authorised deposit-taking institution in Australia; consumer credit and AML/CTF obligations apply. | APRA CPS 230 Operational Risk Management; APRA CPS 234 Information Security; Privacy Act 1988, including APP 1.7 to 1.9 automated decisions (from 10 Dec 2026); Anti-Money Laundering and Counter-Terrorism Financing Act 2006; National Consumer Credit Protection Act 2009; Banking Code of Practice |
| Insurance (Australia) | APRA-regulated insurer in Australia; claims, underwriting and pricing decisions affect policyholders. | APRA CPS 230 Operational Risk Management; APRA CPS 234 Information Security; Insurance Contracts Act 1984; Privacy Act 1988, including APP 1.7 to 1.9 automated decisions (from 10 Dec 2026); General Insurance Code of Practice |
| Superannuation (Australia) | APRA-regulated superannuation trustee in Australia acting for members. | APRA CPS 230 Operational Risk Management; APRA CPS 234 Information Security; Superannuation Industry (Supervision) Act 1993; Privacy Act 1988, including APP 1.7 to 1.9 |
| Health (Australia) | Australian health service handling health information, which is sensitive information under the Privacy Act. | Privacy Act 1988 (health information is sensitive information); My Health Records Act 2012; Therapeutic Goods Act 1989 (software as a medical device); State health records legislation |
| Victorian Government | Victorian Government department or agency procuring or using AI. | Victorian Government Purchasing Board: Navigating AI procurement (updated 3 Aug 2026); Privacy and Data Protection Act 2014 (Vic); Victorian Protective Data Security Standards |
| European Union | Organisation placing on the market or using AI systems in the European Union. | Regulation (EU) 2024/1689 (AI Act): risk classification and deployer obligations; GDPR Article 22 (automated individual decision-making); DORA (financial entities) |
Decision support only, not legal or regulatory advice. AI-generated ratings and citations must be reviewed by a qualified person before they are relied on.