Skip to content
QuorlyticTalk to a Data ExpertContact
Menu
Illustration: an institutional city skyline at night behind a colonnaded plaza, with faint lineage rails running between lit facades.

Industry / Financial services

Data foundations for financial decisions that must be explained.

Data and AI for financial services builds reporting and analytics that can be explained and audited, not just displayed. Quorlytic ties every reported figure to a traceable calculation and source, designs access around regulatory obligations rather than convenience, and reconciles a workflow before any automation is layered on top of it.

By QuorlyticUpdated

In financial services the question is rarely whether a number can be displayed; it is whether the number can be explained. Definition, transformation, source, effective date, entity and control are what make a figure defensible — and they are architecture decisions, not reporting features.

  • Definition traced
  • Effective-dated
  • Reconciled
  • Access enforced
  • Traceable figuresDefinition, transformation and source recorded for every reported number
  • Effective datingBackdated corrections carry their own period instead of rewriting history
  • Controlled accessEntitlement enforced before data reaches any consumer or model
  • Reproducible evidenceA reviewer can rebuild the number, not merely look at it

Lifecycle

From transaction to decision

The path a reported figure takes from an event to a signature. Institutions differ in how these stages are organised and named; the stages themselves are what every review asks about.

  1. Define the measure before it is built

    Revenue, exposure, arrears and capital are each several measures wearing one word. The definition states calculation, grain, period basis and exclusions, with an owner who resolves disputes.

    Data
    Metric definitions, business glossary, ownership records, policy references, regulatory return specifications.
    Decision
    Which definition is authoritative, and who may change it.
  2. Capture the transaction as it happened

    Events enter through core systems, payment rails, brokers and documents, each with its own identifiers, posting rules and timestamps. Event date and posting date begin to diverge here.

    Data
    Transaction and journal entries, party and account identifiers, value date, posting date, currency, source system reference.
    Decision
    When the event is recognised, and against which account or party.
  3. Post, match and reconcile

    Entries are matched across systems and against external statements. Breaks, suspensions and reversals are normal; the question is whether they are visible and owned.

    Data
    Ledger balances, matching rules and break reports, reversal and adjustment records, nostro and settlement positions.
    Decision
    Which break is real exposure and which is a timing difference.
  4. Aggregate across entities and hierarchies

    Exposure, liquidity and customer value are aggregated across legal entities, portfolios and product hierarchies that do not share one key or one reporting calendar.

    Data
    Legal-entity hierarchy, product and portfolio mapping, counterparty groups, currency conversion rates and policies.
    Decision
    How the group position is stated, and on which basis.
  5. Investigate what the signal does not explain

    Alerts, anomalies and unexplained movements go to a person. The useful design keeps the evidence next to the alert, so the review is an investigation rather than a search.

    Data
    Case and alert records, transaction history, counterparty context, prior dispositions, policy and threshold references.
    Decision
    Which case is escalated, cleared or closed with a recorded reason.
  6. Support the decision, keep the judgement human

    Risk, credit and pricing decisions consume model and analysis output, but the authority for a consequential decision stays with a named role and is recorded.

    Data
    Model inputs and versions, scoring output with confidence, policy rules, approval records and overrides.
    Decision
    Approve, decline, price, hold — with an accountable owner.
  7. Report on a defined cut-off

    Management, regulatory and financial reporting each run to a cut-off, a basis and a sign-off. Late corrections have to be attributable to the period they belong to rather than folded into today.

    Data
    Reporting tables, reconciliation evidence, lineage, adjustment and restatement records, sign-off trail.
    Decision
    What is reported this period, and what belongs to an earlier one.
  8. Attest, review and improve

    Reporting is signed, reviewed and questioned. The review is where data architecture is either proven or exposed: a figure that cannot be rebuilt on request fails at this stage, not the previous one.

    Data
    Control evidence, issue and remediation logs, audit findings, lineage from report line back to source record.
    Decision
    Whether the control is adequate, and what has to change before the next cycle.

Where it breaks

Where financial data estates break

Four failures explain most of the distance between a reporting pack and a defensible number.

Definitions that live in the report rather than the platform

A measure is implemented in the reporting layer, sometimes in several places, so the same figure can differ between a management pack, a regulatory return and a dashboard.

What it costsReviews become reconciliations between reports, and the organisation spends its control budget explaining differences rather than managing risk.

Effective dating treated as an afterthought

Backdated corrections, restatements and late entries overwrite the value that was reported at the time, leaving no record of what was known when.

What it costsReported figures change without explanation, and a reviewer cannot reconstruct what the position actually was on the reporting date.

Lineage that stops at the warehouse

Transformation logic is documented in code and spreadsheets but not connected to the report line a reviewer asks about.

What it costsEvery question becomes an investigation, and the answer depends on who is available to remember how the number was built.

Access designed after the data is joined

Entitlement is applied in the reporting tool, while the underlying model holds every entity and every record for everyone.

What it costsAccess testing is unreliable, sensitive data reaches places it should not, and the control cannot be evidenced.

Functions

What each financial function owns

Five functions, each owning a question that a data architecture either answers or cannot.

Financial services functions, the question each owns and the data that answers it
FunctionThe question it ownsData it needsAnalyticsDecision
Risk & capitalWhere is risk concentrated, and can the number be defended?Exposure by counterparty and product, collateral, limits, model output with version, hierarchy mappingsRisk aggregation across entities, concentration and limit analysis, scenario comparisonReduce, hedge, hold or escalate exposure
Finance & reportingCan this reported figure be reproduced on request?Ledger balances, adjustments, effective-dated records, reconciliation evidence, lineage to sourceReconciliation, variance analysis, restatement attribution, control testingReport, adjust, restate or remediate the control
Financial crime & investigationsWhich activity requires investigation, and what evidence supports it?Alert records, transaction history, counterparty and network context, prior dispositions, policy thresholdsAlert prioritisation, network and pattern analysis, case outcome trackingEscalate, clear or close with a recorded reason
Credit & lendingWhat evidence should support this credit decision?Income and cash-flow data, exposure history, collateral, behavioural signals, policy rules and overridesAffordability and behavioural scoring, policy-rule evaluation, override monitoringApprove, price, decline or refer with an accountable owner
Customer & distributionWhich customers or products need attention, and why?Relationship and product holdings, servicing history, interaction records, consent and entitlement contextValue and attrition analysis, servicing pattern analysis, next-best-action supportServe, retain, reprice or withdraw a proposition

Decisions

Four financial decisions, traced end to end

Four decisions, each traced from the question to the measurement — including what the analysis does not settle.

Which activity requires investigation, and in what order?

  1. Question
  2. Data
  3. Analytics
  4. Decision
  5. Measurement

Data required

  • Alert and case records with their generating rule and version
  • Transaction history linked to the account, party and counterparty
  • Prior dispositions for the same pattern and the reason recorded
  • Policy thresholds, typologies and known false-positive causes

Analytics

  • Alerts ranked by consequence and by the decision they require, not by rule type
  • Pattern and network analysis over reconciled transaction data
  • Queue sizing against the investigation capacity that actually exists

Decision

Which case is escalated, which is cleared by rule, and which needs a person now

Measurement

  • Time from alert to first investigative action
  • Disposition mix, with false-positive causes fed back into the rule
  • Reopened cases, which indicate a decision made too quickly

What this does not settleThis does not determine guilt, and it does not replace the investigator's judgement or the institution's policies. Ranking changes the order in which cases are examined, not the standard they are examined against — and a control that cannot explain why a case was cleared will not survive review.

Where is risk concentrated, and is the aggregation defensible?

  1. Question
  2. Data
  3. Analytics
  4. Decision
  5. Measurement

Data required

  • Exposure by counterparty, product, portfolio and legal entity
  • Legal-entity and group hierarchy with effective dates
  • Collateral, netting arrangements and limit records
  • Model output with the version and assumptions used to produce it

Analytics

  • Aggregation across entities and hierarchies on one agreed basis
  • Concentration and limit analysis with the hierarchy made explicit
  • Sensitivity of the aggregate to mapping and model choices

Decision

Where exposure is reduced, hedged or escalated, and on what reported basis

Measurement

  • Reconciliation of aggregated exposure to source and to prior periods
  • Time to produce the aggregate, including manual steps
  • Mapping and model changes with the effect they had on reported exposure

What this does not settleAggregation is only as defensible as the mappings underneath it. Where entity structures, netting eligibility or model assumptions are disputed, the honest output is the range those choices produce — not a single figure presented as the position.

What evidence should support this credit or risk decision?

  1. Question
  2. Data
  3. Analytics
  4. Decision
  5. Measurement

Data required

  • Applicant or counterparty financial data with its effective date
  • Exposure, repayment and behavioural history by product
  • Collateral and guarantee records with valuation dates
  • Policy rules, thresholds and the override history that followed them

Analytics

  • Affordability and behavioural analysis with clearly stated data coverage
  • Policy-rule evaluation separated from model output
  • Override monitoring, including outcomes of decisions taken against the rule

Decision

Approve, decline, price or refer — with a named owner and a recorded reason

Measurement

  • Decision consistency against policy, and the reasons for each override
  • Model and rule performance by segment and over time
  • Evidence completeness at the point of decision, not reconstructed later

What this does not settleNo model decides this alone, and this page does not describe autonomous lending. The analysis supplies evidence and consistency; the authority, the rationale and any exception to policy stay with an accountable person and a recorded process.

Can this reported number be reproduced for review?

  1. Question
  2. Data
  3. Analytics
  4. Decision
  5. Measurement

Data required

  • The report line, its definition and the transformation that produced it
  • Source records with value date, posting date and effective-date history
  • Adjustments, reversals and restatements attributable to their period
  • Access, control and sign-off evidence for the reporting cycle

Analytics

  • End-to-end lineage from report line to source record
  • Reconciliation and variance analysis between periods and between reports
  • Control testing evidence attached to the figure it supports

Decision

Report, adjust, restate or remediate the control — with the reason recorded

Measurement

  • Proportion of report lines traceable without manual reconstruction
  • Time to answer a reviewer's question about a specific figure
  • Restatements and adjustments, attributed to the period and cause

What this does not settleTraceability is not the same as correctness: a figure can be fully traceable and still wrong because a definition or a mapping is wrong. This map establishes that a review can be answered; whether the answer is defensible remains a question of definition, policy and judgement.

Illustrative interface

A figure traced back through lineage, reconciliation and control

A reference interface, not a Quorlytic product and not a client screen. It shows the shape of the screen a review would be answered on: one row per report line, with its reconciliation state, effective dating and trace path. No figure here is a result.

A figure traced back through lineage, reconciliation and control
Report lineLatest sourceEffective dateReconciliationTrace
OK: Net interest income · entity ACore banking · ledger 0431 Aug 2026Balanced to ledgerDefinition · mapping · source
Watch: Expected credit loss · portfolio 12Risk engine run 2026-08-3030 Aug 2026Model rerun pendingModel version · assumptions · inputs
Risk: Fee and commission · entity CPosting-date adjustmentBackdated to 31 Jul 2026Break open · 2 itemsAdjustment · period · approver
OK: Customer deposits · groupParty master · hierarchy v631 Aug 2026Balanced to sub-ledgerHierarchy · conversion · source
Watch: Operational loss eventCase management · 1 new this period27 Aug 2026Awaiting classificationCase · policy · classification
  • Risk: reported with an open break or an unapproved adjustment
  • Watch: complete but pending a rerun, a classification or an approval
  • OK: reconciled, effective-dated and traceable to source without manual steps

Data foundation

A trusted financial data foundation

The foundation exists so that a figure can be followed backwards. It keeps parties and accounts distinct, preserves value, posting and effective dates, converts currency on a stated basis, and attaches lineage and entitlement to the data rather than to the report.

  1. Source systems

    Regulated records with different books, clocks and owners. The ten systems are enumerated in the inventory below.

    • Core banking and ledgers
    • Trading and position systems
    • Customer and onboarding platforms
    • Risk, market and reference data
  2. Ingestion

    Late and amended records handled as normal, not as incidents

    • Batch extracts aligned to book close
    • Change data capture from operational stores
    • Vendor reference and market data feeds
    • Corrections and restatements as first-class events
  3. Cloud platform

    One reconciled history, with the as-was view kept

    • Raw landing preserved as received
    • Validated and reconciled models
    • Point-in-time and as-at views
  4. Identity & hierarchy

    Who the counterparty is, and where it sits

    • Customer and counterparty resolution
    • Legal entity and group hierarchy
    • Product and instrument reference
    • Book, desk and portfolio structure
  5. Controls & lineage

    Evidence a reviewer can follow

    • Reconciliation to the system of record
    • Declared definitions with owners
    • Lineage from report figure back to source
    • Access and change audit
  6. Risk & finance models

    Comparable across books and periods

    • Exposure and concentration
    • Credit and impairment inputs
    • Liquidity and capital measures
    • Profit and loss attribution
  7. Decision surfaces

    Where committees and controllers work

    • Risk and exposure reporting
    • Regulatory and management submissions
    • Breach and exception review
    • Reconciliation investigation
  8. Action

    Never an automated credit or trading decision

    • Limit and policy changes
    • Escalation and committee papers
    • Correction and restatement
    • Control remediation
Reference architecture — a target-state shape, not a description of a client engagement.

Three conventions carry most of the weight: value date recorded separately from posting date, hierarchy and reference data kept with effective dates rather than overwritten, and lineage generated by the pipeline rather than drawn by hand. Without them, every review becomes a reconstruction. For a reported balance, business intelligence reconciliation defines the metric and reporting grain; when source systems are being replaced, data modernization planning must preserve the effective-date history those checks depend on.

10 source systems, and what to check before trusting each
  • Core banking and ledgers

    Posted balances, account and product identity, value and posting dates

    Check before trustingPosting-date records that cannot be re-stated to the value date they belong to

  • Payments and cards

    Transaction events, settlement positions, reversals and chargebacks

    Check before trustingReversals that arrive after the period closes and are absorbed into the current one

  • Customer and party master

    Legal entity, party and relationship hierarchy, with effective dates

    Check before trustingHierarchies restated in place, so historical aggregation cannot be reproduced

  • KYC and financial crime systems

    Alerts, case records, dispositions, threshold and rule versions

    Check before trustingDispositions stored without the rule version that generated the alert

  • Loan origination and servicing

    Applications, approvals, repayment schedules, arrears and forbearance

    Check before trustingPolicy overrides recorded in free text where they cannot be monitored

  • Risk engines

    Exposure, limit, model output and the assumptions behind a run

    Check before trustingReruns that overwrite previous output without version history

  • General ledger and finance

    Adjustments, accruals, intercompany positions and period close

    Check before trustingManual journals that reach reporting without an attributable period

  • Case and document management

    Investigations, evidence, correspondence and approvals

    Check before trustingEvidence held in documents that cannot be linked to the record under review

  • Warehouse and lakehouse

    Reconciled history, effective-dated models and the lineage between them

    Check before trustingTransformation logic that exists only in code, disconnected from the report line

  • Approved external reference data

    Currencies, calendars, counterparty and instrument reference data

    Check before trustingReference data refreshed without the vintage that was used at reporting time

Analytics & AI

From governed reporting to AI-assisted review

Each rung is only worth building once the one below it holds. In a regulated estate, skipping a rung is not a shortcut; it is a control that cannot be evidenced.

  1. Governed reporting

    One definition per measure, reconciled to source, effective-dated, with lineage that a reviewer can follow.

    RequiresMetric ownership, effective-dated records and generated lineage

  2. Reconciliation and control analytics

    Breaks, adjustments and restatements surfaced with their cause, their period and their owner.

    RequiresValue and posting dates preserved, plus attributable adjustment records

  3. Risk and portfolio analysis

    Concentration, limit and sensitivity analysis on aggregated data that ties back to source.

    RequiresHierarchies with effective dates and documented aggregation bases

  4. Investigation support

    Alerts and cases ranked by consequence, with the evidence attached where the decision is made.

    RequiresDispositions recorded with rule versions and a reason code that means one thing

  5. AI-assisted review

    Retrieval and summarisation over permitted documents and records, with citations and a refusal path, kept inside entitlement.

    RequiresPermission-aware retrieval, approved corpora and evaluation of refusals as seriously as answers

Maturity

A maturity progression, with readiness tests

The label matters less than the readiness test: it says what has to be true before the next stage is worth attempting in a reviewed environment.

  1. Report-driven

    Each report implements its own definitions; lineage is reconstructed by the people who built the report.

    Ready for the next stage whenA measure has one owner and one definition outside the reporting layer

  2. Governed and reconciled

    Definitions, lineage and reconciliation are in the platform; adjustments carry their period and approver.

    Ready for the next stage whenA reviewer's question about a figure is answerable from the platform, not from memory

  3. Control-integrated

    Controls, access and issue tracking attach to the data and the figure it supports rather than to the pack.

    Ready for the next stage whenControl evidence can be produced for a specific report line on request

  4. Decision support in review

    Risk, investigation and customer decisions consume governed data with human authority and recorded rationale intact.

    Ready for the next stage whenOverrides, model versions and outcomes are monitored as part of the control environment

Measurement

What a financial institution should measure

What a financial institution should measure, and which decision each measure informs.

Common financial services data measures, what they capture and the decision they inform
MeasureWhat it capturesDecision it informs
Report-line traceabilityShare of report lines traceable to source without manual reconstructionWhere lineage or modelling has to be completed before the next review
Reconciliation break rate and ageingBreaks open, by value and age, and how long they stay openWhich break needs escalation rather than another day of matching
Adjustment and restatement volumeCorrections by period, cause and approverWhether the cause is upstream data, a definition or a control
Time to reproduce a figureEffort and elapsed time to answer a reviewer's questionWhere lineage, documentation or access must improve
Access exceptionsEntitlement failures found in testing with real identitiesWhether access is designed in the platform or assumed in the tool
Data quality by critical elementAccuracy, completeness and timeliness for the elements that feed reportingWhich source or control to remediate first
Model and rule version coverageShare of outputs stored with the version and assumptions that produced themWhether a decision taken last quarter can be explained today
Investigation queue healthCase age, volume against capacity, and reopen rateWhether to change detection rules or add investigative capacity

These are measures an institution would track for itself, with the reading most teams give them. They are not results Quorlytic has produced, and definitions vary between institutions, between entities and between reporting bases.

Principles

Principles we work to

The 2 principles this work is built on
  1. 01

    Make every number explainable

    Reporting figures must reconcile to source systems and carry an owner. Agree definitions for revenue, exposure and risk measures before building views. Preserve the calculation, the period and the exclusions so a reported value can be traced and defended.

  2. 02

    Design access around obligations

    Regulatory and internal controls determine who may see which data. Carry roles, retention and audit requirements into models and reports. Test row-level access with the identities that will actually consume the output, not a demonstration account.

Engagement

How an engagement can progress

A sequence that starts with one reported figure and ends with a reviewed decision path, without claiming to deliver a regulatory programme in one step.

  1. Choose one figure

    OutputA single reported measure with its consumers, disputes and review history, chosen because it matters

  2. Trace what exists

    OutputA lineage map from report line to source, with the gaps and manual steps named rather than hidden

  3. Agree the definition

    OutputOne owned definition with grain, period basis, exclusions and an approver

  4. Rebuild the path

    OutputPipelines and models that produce the figure from source, with effective dating and generated lineage

  5. Attach the controls

    OutputReconciliation, access testing and evidence linked to the figure rather than to the pack

  6. Extend deliberately

    OutputThe next figure, entity or decision promoted on the same pattern, with the control evidence carried forward

Where this connects

Capabilities that support these decisions

Further reading, chosen for this path

Questions

Questions worth asking.

Can analytics work begin before governance is complete?

A bounded, read-only workflow can start once source ownership and access rules are clear. Broader reporting or automated decisions should wait until definitions and controls are agreed.

Can fraud detection be automated end to end?

Detection can be automated; the consequence usually should not be. Automated scoring or alerting is common, while blocking a customer, closing a case or escalating an investigation stays with a person who can see the context. Keep the decision boundary explicit and test the false-positive cost against the team that handles the alerts.

Your next data decision

Start with a clear problem.
Build what comes next.

Talk to a Data Expert

Bring the business question.
We'll help shape the engineering brief.