RedHub AIRedHub AI
Tool Gate · How it works

How the gate works

How the Advisory-Firm AI Exam Defensibility Audit works

This tool grades one advisory firm's AI use against the six exam-surface domains an SEC or state examiner probes. It scores 6 weighted controls into a 0–100 number — then a gate that can only make the verdict worse.

The 6 weighted controls

01AI in marketing & advertisingwt 20
02Books & records for AI outputsfatal domain · at zerowt 20
03Supervision & written policieswt 18
04Third-party / vendor AI oversightwt 16
05Client disclosure & Form ADVwt 14
06AI communications capturewt 12
EXAM-READY
score 75+
OPEN FINDINGS
score 50+
NOT DEFENSIBLE
below floor
Fatal-domain gate · worsen-only

Three of the six domains are load-bearing — AI in marketing, books & records for AI outputs, and supervision & written policies. A zero on any one of them forces NOT DEFENSIBLE regardless of the score, because each is a finding that draws a deficiency letter on its own. A strong file elsewhere can't cure a missing load-bearing control; clear the zero and the gate releases.

73/100
NOT DEFENSIBLE

Why: The Northgate branch scores 73 on strong marketing, supervision, vendor, and comms controls — on the number alone it reads OPEN FINDINGS. But its books-and-records domain, a fatal exam domain, is at zero: AI summaries and AI-drafted client comms aren't retained where they function as records. The fatal-domain gate fires, so the verdict is NOT DEFENSIBLE, not OPEN FINDINGS — a polished file elsewhere can't cure a missing load-bearing control.

Fix firstBooks & records for AI outputs — the fatal domain sitting at zero. Retain AI summaries and AI-drafted client comms where they function as records; clearing that one domain releases the gate and moves the verdict off NOT DEFENSIBLE.

A high score didn’t save it. The score is context; the gate is the answer — and it names the one thing to fix first. Not legal advice. This is a readiness self-assessment that grades a firm's evidence from your own marks — not a compliance audit, a mock exam, a certification, or an opinion of counsel. It renders no legal ruling, confirms no obligation, and scores no person. Confirm which rules apply to your firm, and every date, with your CCO or a qualified securities attorney.