Date: October 15, 2025
FINMA Guidance 08/2024 draws supervised institutions' attention to AI risks and reports FINMA's observations from supervisory practice. It describes expectations around governance, risk management, transparency, and proportionality to an institution's size, complexity, structure, and risk profile.
The instrument does not prescribe cybiont's architecture or require a particular cryptographic record for every inference. It is a FINMA Guidance, not a FINMA Circular.
cybiont's public signed AI-response record is one bounded technical control: an auditor can run the valid and tampered cases, inspect the claim limits, and decide whether to rely on it within a wider internal control system. What the surrounding deployment establishes against FINMA expectations is a separate question, and one for that deployment.