From AI pilots to production: Building governed AI systems for BFSI

By Sandeep Khuperkatr Founder & CEO, Data Science Wizards (DSW)

Over the few years artificial intelligence has become a big deal. It is no longer something that people talk about in meetings. Now companies like banks and insurance companies around the world are using it. They are spending a lot of money on things, like models, generative artificial intelligence, machine learning platforms, intelligent automation and something called agentic artificial intelligence.

Some companies have tried using intelligence in small projects. These projects have shown that artificial intelligence can really help. It can make customers happier make things run smoothly help detect fraud make underwriting and claims processing easier and even help with risk management. Despite all this progress something important has become clear.

The challenge facing financial institutions today is no longer whether AI can generate value. It is whether AI can be trusted to operate continuously, safely, and responsibly in production.

Across the BFSI sector, organizations have become increasingly proficient at building AI models. What remains difficult is operating those models and increasingly, autonomous AI agents as part of critical enterprise operations governed by regulatory expectations, operational resilience requirements, and evolving business policies.

This represents a fundamental shift in how AI should be viewed.

The next phase of enterprise AI is no longer about model development. It is about system design.

The Production Gap
Many AI initiatives begin successfully. A business problem is. Then people start collecting data. They use this data to train models and try out ideas to see if they work. These tests show some good results. The people in charge start to get excited about the project so they put money into it. The company gets ready to use the ideas in more places. This is when things start to get really complicated, with the business problem. Production AI introduces challenges that rarely appear during experimentation.

Models evolve. Data distributions change. Policies are updated. Regulations become stricter. Human approvals become mandatory. Business exceptions multiply. Multiple AI services begin interacting with one another. Increasingly, autonomous agents execute multi-step workflows across enterprise systems.
What initially appeared as independent AI use cases gradually become interconnected decision systems.

The problem is no longer algorithmic.

It becomes architectural.

Why BFSI Is Different
Few industries feel this change strongly than banking and insurance.
Banks and insurance companies are always being watched by regulators. They also handle amounts of private customer data and make crucial decisions. They have to be very careful with customer information and follow rules. This makes their job very challenging. Banks and insurance companies are under a lot of pressure. They must protect customer data. Make smart decisions. The banking and insurance industries have a lot on their plate. They deal with information every day. Regulators are always checking their work. This is a responsibility, for banking and insurance.

A credit recommendation influences lending exposure. An underwriting decision impacts long-term financial liability. A fraud investigation affects customer trust. A claims recommendation carries legal implications.

These decisions are different from the ones you make for things people use at home. They need to be right. They also have to meet a lot of other rules. The rules are about making sure people are in charge that we can track what happens that we can explain what is going on that everything is secure that we can look back and see what was done and that the system keeps working when things go wrong. These decisions need to be good, for governance, auditability, explainability, security, traceability, human accountability and operational resilience.

AI therefore becomes more than an analytical capability.

It becomes part of institutional responsibility.

Consider a single claims-processing workflow in an insurance enterprise. An AI agent may extract information from a submitted document, a separate model may assess fraud risk, a third system may check policy terms against a knowledge base, and a fourth may recommend a settlement amount before a human adjuster ever sees the case. Each component may individually perform well. . When we connect these parts into a system that works on its own the organization is not just checking a model.

It is checking a decision system that needs to be clear to regulators

can be changed if policies are updated during the process

and has a person responsible if something is questioned.

This need does not go away just because the process is quicker or more automated.

In fact it gets more important.

The Shift from Models to Systems
In the past AI programs in companies were usually set up around models. Success was based on how accurate, precise and quick the model was, or how often it was updated. These things are still important.

They are not enough on their own. Modern AI systems are not one model. They include things like base models, special models, for certain areas, systems that find information, knowledge bases, AI helpers, business rules, people who approve things, outside tools, company apps and ongoing checks.

Together these components create living operational systems.

The quality of each individual model matters. Equally important is how these components behave collectively.

This introduces a systems engineering challenge rather than simply a machine learning challenge.

Governance Must Move into Runtime
Traditional governance approaches often focus on documentation.
Policies are written. Risk assessments are completed. Compliance reviews are performed before deployment.

Unfortunately, production environments evolve continuously. Governance that exists only in documents cannot respond to runtime events.

Instead, governance increasingly needs to become executable. Policies should influence how AI operates not simply describe how it ought to operate.

Examples include approval requirements before executing financial actions, model selection based on jurisdiction, customer-specific data access controls, escalation thresholds, confidence-based routing, and automated rollback mechanisms.

A policy that is written today may say that certain credit products cannot be suggested to customers in areas or that any transaction that is above a certain amount needs to be approved by two people. If this policy is only written in a document about following rules then a computer system that works on its own has no way to follow it when things change. Like a rule a new limit set by the company or a temporary restriction during an audit. When the same policy is turned into a rule that the system can understand and follow the system can enforce it away keep a record of it and make a trail of what happened without relying on a person to remember to check the document that may already be old.

From MLOps to AI Operations
The way we build and use models changed a lot with MLOps. It made things better for organizations. However the way we use intelligence now is much bigger than just the old way of working with machine learning. Now organizations have to manage things like workflows that involve independent decision making, long chains of decisions using many models together getting approvals, from humans enforcing policies remembering things at the enterprise level watching the system in real time and always adapting to changes.

This requires thinking beyond deployment pipelines.

It requires thinking about operating AI continuously.

A New Architectural Shift: From AI-Featured to AI-Native Enterprises
To understand why this operational challenge is becoming a question lets take a step back and look at how companies are changing as a whole. Many organizations today say they are using AI or powered by AI.. In reality most are still software-focused companies with AI as just another tool. AI is often added to existing apps as a feature a chatbot in a customer system a suggestion tool in a workflow or a separate model, for a business process.

These efforts do create value. However they don’t really change how the company works. The next big change is different. It is moving from companies that just use AI to companies that are built around AI.

An AI-native company is designed with the idea that intelligence’s now a core part of how it operates. AI is always involved in making decisions managing workflows, handling risks engaging with customers and optimizing operations. AI helps companies make decisions. AI is used in areas of the company. The use of AI is widespread. Companies are becoming more reliant on AI.

This changes the architectural question entirely.

The objective is no longer “Where can AI be added?”

Instead, it becomes “How should AI be operated?”

That distinction marks the beginning of a new enterprise architecture paradigm and it reframes everything discussed so far. The production gap, the shift from models to systems, the need for runtime governance, and the move from MLOps to AI Operations are not isolated engineering problems. They are early symptoms of enterprises attempting to become AI-native without yet having the architecture to support it.

AI-Native Requires AI Infrastructure
The transition to AI-native enterprises cannot be achieved simply by deploying more models or adopting larger foundation models.

Native systems require native infrastructure.

This is not a new pattern in enterprise computing it is the same pattern that has recurred at every major architectural transition. Mainframe computing required operating systems before it could become general-purpose. Distributed applications required database management systems before data could be trusted at scale. Virtualized data centers needed something called hypervisors before they could work without being tied to hardware.

Native applications needed something called container orchestration before the software could be used and scaled up reliably across many different environments. In each case the change did not happen because of one tool. It happened because a new layer emerged that could coordinate complex and distributed parts for the company. Now companies that use a lot of Artificial Intelligence need the kind of layer. One that can control the intelligence itself. This means organizing how Artificial Intelligence is used making sure company rules are followed keeping track of what’s done coordinating what people do and always changing to meet new business and regulatory requirements. So the conversation is not about using Artificial Intelligence. It is about how companiesre organized to work with Artificial Intelligence.

An Emerging Architectural Pattern
of managing each Artificial Intelligence part on its own companies need a common layer that can organize how things are done make sure rules are followed keep track of what is done and combine different Artificial Intelligence abilities. A new architectural pattern is starting to appear.

One that can be called an Enterprise Artificial Intelligence Operating System. This Enterprise Artificial Intelligence Operating System is like a control center for Artificial Intelligence, in companies. It helps organise Artificial Intelligence makes sure company rules are followed and keeps track of what’s done.

This should not be interpreted as another platform or framework. Instead, it represents an operational layer responsible for governing AI systems throughout their lifecycle, in the same way operating systems once standardized compute, and container orchestration later standardized cloud infrastructure—except here, what is being standardized is the operation of intelligence itself.

Principles of a Governed AI Operating Layer
Although implementations will differ across organizations, several architectural principles appear increasingly important.

Governance by Design
Governance should be embedded into execution rather than applied retrospectively. Policies become executable. Compliance becomes operational. Controls become continuous.

Human Accountability
People should always be involved in financial decisions. Artificial intelligence helps professionals make decisions but it does not take the place of the responsibility that institutions have.

Enterprise Ownership
Companies should keep control of their intelligence things like how work gets done, models and the knowledge that comes from daily operations. This helps companies be flexible in the term and not have to rely too much on systems that are owned by other companies.

Vendor Interoperability
Financial institutions usually do not use one technology company. So the systems that artificial intelligence uses in the future should be able to work with different models, cloud providers, data platforms and special artificial intelligence services. Being able to work with different systems becomes a very important ability.

Continuous Observability

When artificial intelligence is used in life it is necessary to always be able to see how well it is working how the models are behaving, if policies are being followed what has happened in the past if the performance is getting worse and what operational risks there are. Being able to see what is going on becomes essential not something that is nice to have.

Implications for CIOs and Risk Leaders
As more companies start to use intelligence the people, in charge of technology may want to start asking different questions.

Of asking “Which artificial intelligence model is the best?” they may start asking “How are all artificial intelligence decisions being supervised and controlled?”

Instead of “Can we deploy this model?” they may ask “Can we operate this safely for the next five years?”

Instead of “Who built this?” they may ask “Who remains accountable after deployment?”

These questions represent organizational maturity. They shift attention from experimentation toward operational resilience—and, ultimately, toward whether the enterprise is building the architecture an AI-native organisation will require, or simply accumulating AI features on top of an architecture that was never designed for them.

This shift also has organisational consequences that extend beyond the technology function. When AI operates as infrastructure rather than as a collection of isolated tools, accountability for its behavior can no longer sit solely within a data science or innovation team. Boards and risk committees increasingly require visibility into how AI decisions are governed across the institution, not only how individual models perform.

Audit functions need a consistent way to examine AI-driven decisions long after they are made. Compliance teams need assurance that policy changes take effect immediately across every AI system, not weeks later through a manual update cycle. An operating layer that governs AI execution does not only solve a technical problem—it gives these functions a single, consistent point of accountability for a capability that now touches nearly every part of the institution.

Conclusion
The future of enterprise AI will not be defined by who deploys the most models.

It will be defined by who can operate intelligence as part of the enterprise itself.

Organisations will gradually evolve from digital enterprises to AI-native enterprises. That evolution requires more than models, copilots, or autonomous agents. It requires an operating architecture where governance, security, compliance, execution, and continuous improvement become intrinsic properties of the system rather than external controls.

This is why the conversation is beginning to move beyond AI platforms toward the concept of an Enterprise AI Operating System—not as another product category, but as an emerging architectural pattern for operating AI as critical enterprise infrastructure.

Just as operating systems once standardized compute, the next generation of enterprise architecture will increasingly require a governed operating layer for intelligence itself—particularly within banking and insurance, where every AI-driven decision carries regulatory, financial, and institutional consequence.
The future is unlikely to belong to enterprises that merely deploy AI.
It will belong to enterprises that become AI-native.

Comments (0)
Add Comment