The US market, under the partner-bank pattern.

US financial services sit under a parallel federal-and-state supervisory structure. At the federal level, the Financial Crimes Enforcement Network (FinCEN) supervises anti-money-laundering compliance under the Bank Secrecy Act; the Office of the Comptroller of the Currency (OCC) supervises nationally-chartered banks; the Consumer Financial Protection Bureau (CFPB) supervises consumer financial products under federal consumer-protection statutes; and the Federal Trade Commission (FTC) supervises unfair-or-deceptive practices.

At the state level, each state has its own banking or financial-services regulator (the New York Department of Financial Services is the most consequential for fintech; California, Massachusetts, Illinois, and Texas all matter too) and its own money-transmitter and lender-licensing regimes. Working in the US under the partner-bank pattern means engaging with both the federal regulators that supervise the partner and the state regulators that govern the customer-facing activity.

The partner-bank pattern is now the dominant model for non-chartered fintech firms operating in the US. Regulated services (deposit accounts, payments, debit and credit card programmes, money transmission) are provided by a US-chartered institution; the fintech operates the customer-facing technology layer; the supervisory responsibility for the regulated activity sits with the bank.

The OCC, Federal Reserve, and FDIC have published interagency guidance on third-party risk management that governs how partner-bank arrangements are supervised. Veetso's controls system was designed against that guidance.

US AI policy is a moving target. The federal executive actions on AI (the 2023 Executive Order, the 2025 revisions, and the NIST AI Risk Management Framework) set the supervisory expectations at the federal level; state-level AI bills (notably Colorado's AI Act, California's SB 1047 successors, and New York's AI legislation) layer additional obligations on top.

Veetso's governance posture (six gates, hash-chained audit log, vendor due diligence, source attribution) maps to the NIST AI RMF and to the patterns the OCC and CFPB have signalled in their model-risk and consumer-protection guidance.