glba

30 Agent Skills for deterministic USA compliance auditing of AI agents — HIPAA, NIST AI RMF, FERPA, COPPA, PCI-DSS, SOC 2, FedRAMP, CMMC, GLBA, privacy & GDPR. Presidio PHI redaction, MCP templates, Pydantic AI, VS Code & JetBrains plugins.

PropTech audit-stream Operator surface. Per-mortgage-application AI-tool-access events hash-chained for ECOA Reg B + RESPA + HMDA + GLBA Safeguards + CFPB UDAAP + Fair Housing recordkeeping. MISMO/URLA-bridged. human_underwriter_required invariant. JSON Schema + Node verifier.

FinTech AI Procurement Decision Card v0.3 vault contract profile. 17 financial-data categories + 10-doctrine consent_basis + 10 protection levels + 8 vendor due-diligence artifacts. Section 1071 demographic + ECOA protected-class default NOT a model input. Section 1033 portability window in retention envelope.

PropTech-specific profile of the AI Procurement Decision Card v0.3 vault contract. Names RESPA (12 CFR 1024), ECOA Reg B (12 CFR 1002), Fair Housing Act, HMDA, GLBA, MLS NAR + 2024 Settlement PII categories + 7-doctrine consent_basis_taxonomy. PropTech-readiness scaffolding, not certification.

PII-safe LLM proxy gateway. Tokenize personal identifiers before they reach any AI model. FastAPI + Microsoft Presidio + spaCy.

Memory-safe logging library for financial systems with SHA-256 integrity and regulatory compliance (SOX/GLBA/PCI-DSS)

Profile of evidence-bundle-spec scoped to CFPB + OCC + FRB + FDIC readiness across 8 obligation families: model-risk-management + ECOA Reg B + FCRA Reg V + GLBA Safeguards + BSA/AML + Section 1071 + Section 1033 + CFPB UDAAP. FinTech scaffolding, not certification.

FinTech audit-stream Operator: per-consumer-credit / deposit / payment / fraud / AML / robo-advisor / Section-1071-small-business AI tool events hash-chained for CFPB + OCC + FRB + FDIC + ECOA + FCRA + GLBA + BSA-AML evidence. Two invariants: human-credit-officer + FCRA permissible-purpose. Excludes mortgage + insurance.

InsurTech AI Procurement Decision Card v0.3 vault-contract profile naming 15 insurance-data categories (ACORD + external consumer data + media + protected-class data) + 7-doctrine consent_basis + 9 protection levels + 5 vendor due-diligence artifacts. CO SB 21-169 protected-class default = NOT a model input.

Profile of evidence-bundle-spec scoped to RESPA + TILA-RESPA Integrated Disclosure (TRID) + Section 8 anti-kickback + escrow + ECOA Reg B + HMDA + Fair Housing + GLBA Safeguards + AI vendor procurement. 10 obligation families. PropTech-readiness scaffolding, not certification.

Open-source PII detection and re-identification risk benchmarks for LLM pipelines under EU AI Act, HIPAA Safe Harbor and GLBA NPI.