Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{202307,
        author = {Ansh Vora and Tanish Chaudhari and Harjas Rohra and Prasanna Kulkarni and Shweta Shah},
        title = {Automated GRC Tool for Fintech Systems},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {12},
        number = {12},
        pages = {8633-8640},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=202307},
        abstract = {As the volume of digital payments have increased rapidly, several financial institutions have had to deal with an increasingly intricate and dynamic regulatory environment. In the face of frequent and consistent circulars and advisories issued by authorities like the Reserve Bank of India (RBI), National Payments Corporation of India (NPCI) as well as global standards bodies such as PCI DSS and ISO/IEC 27001, the orthodox manual compliance processes are overburdened. With the expected workload of interpreting complex and lengthy legal documents, extract obligations from them and then map them to the organization's internal controls, the compliance team faces a gigantic task. Furthermore, the compliance team also must work with other teams to execute those controls and gather auditable evidence under tight deadlines. In the face of the rapidly changing modern fintech systems, this labor-intensive workflow is error-prone and ill-suited to manage the real-time risk associated with the current environment. This paper presents the design and implementation of a framework built especially for tightly regulated digital payments environment- the AI-first Governance, Risk and Compliance (GRC) framework that can automate "obligation-to-evidence" lifecycle from one end to another. The system can intake circulars and contractual documents in machine readable or non-readable formats and uses Mistral Document AI merged with a specialised language model and Retrieval-Augmented Generation (RAG) pipeline to extract obligations into schema-validated YAML.},
        keywords = {Agentic AI, Digital Payments, Document Processing, Governance, Risk and Compliance, Retrieval-Augmented Generation.},
        month = {May},
        }