Resources
Guides, the briefing, and the documents that keep us honest.
Compliance guides
Written for practical use.
Durable resources on key compliance topics, for real financial environments.
AI Governance in a Box: The Ten Documents a Regulator Will Ask for in 2026
A guide to the ten documents that together form an AI governance framework for a regulated firm, what each one must show, and how to build them in an order that holds up to review.
Audit Readiness Best Practices for Financial Firms
Preparation for exams and reviews: documentation, mock audits, remediation and control testing.
Crypto Compliance Guide for Digital Assets
Frameworks for VASPs: token classification, the Travel Rule, custody and blockchain analytics in evolving regulation.
Guide to AML Compliance for Fintechs and Funds
AML frameworks, risk assessments and sanctions screening under BSA/FinCEN/FATF; best practices for transaction monitoring and program design.
Post-Quantum Cryptography Migration for Financial Firms, Step by Step (2026)
A step-by-step plan for financial firms preparing to migrate to post-quantum cryptography, built on the NIST standards and the federal migration model, written for preparation rather than compliance.
The EU AI Act for Fintechs: What Is High-Risk and What Is Not (2026)
A fintech guide to the EU AI Act's four risk tiers: which lending, hiring and biometric uses are high-risk, which chatbots carry transparency duties, and the dates on which each obligation applies.
What Did the SEC's AI-Washing Cases Actually Punish? A Guide for Firms in 2026
The SEC's settled AI-washing cases against two advisers punished statements about AI that the firms could not back up, not the use of AI itself; this guide explains the findings and how to describe AI use accurately.
What Is a Fractional CCO? Benefits and Implementation
Senior compliance leadership for lean teams: what a fractional CCO does, the benefits for fintechs and funds, and how to put one in place.
What Is Quantum Compliance? Post-Quantum Readiness for Financial Firms in 2026
Quantum compliance is the governance work of finding every quantum-vulnerable public-key dependency a firm has and preparing to replace it in a documented order. In the United States the direction comes from NIST and the dates are 2030 and 2035, proposed for federal systems but already shaping private roadmaps. Supervisors in Switzerland, Hong Kong and the EU are moving faster.
What the SEC and FINRA Expect When Advisers Use AI in 2026
Neither regulator has written an AI rulebook: FINRA says its existing rules apply to generative AI, and the SEC has enforced the Advisers Act and the Marketing Rule against advisers whose AI claims were untrue.
The monthly briefing
Signals from the Regulatory Front.
A single summary on what is shifting across compliance, oversight and regulatory pressure. Once a month.
Legal and regulatory
Essential documents for transparency.
How Taft corrects, updates and, where necessary, withdraws published articles and guides.
How Taft's articles and guides are researched, written, checked and approved, and what we will and will not publish.
How Taft Compliance Group collects, uses, shares and protects personal information obtained through its website, inquiries and related interactions.
Operational and regulatory disclosures for Taft Compliance Group: firm status, risk considerations, data, conflicts of interest, complaints.
Taft's security practices, and how to recognise and report attempts to impersonate Taft or solicit information under false pretences.
The terms governing access to and use of the Taft Compliance Group website.