About Attestor

Independent assurance for enterprise AI.

We give financial institutions independent confidence in their AI — validating generative and agentic systems against a defined, examiner-ready standard, and keeping watch over them in production.

What we do

The independent second line for AI.

Attestor is an independent firm providing the validation and ongoing oversight of an institution’s artificial intelligence — spanning generative AI that drafts, summarizes, and answers, and agentic AI that plans, calls tools, and takes action.

We assess each system against a defined standard aligned to SR 26-2 and the NIST AI Risk Management Framework: mapping what the system is and does, testing whether it stays within its intended purpose and authority, scoring its residual risk transparently, and monitoring it in production against set tolerances. Because agentic systems can act — not just generate — they carry the greatest risk and receive the deepest scrutiny, while the same standard scales down to govern generative assistants with one consistent method.

The result is a clear, examiner-ready opinion that an institution’s AI does what it is meant to do, stays within safe bounds, and can be trusted by the board, the second line, and the regulator.

  • Independent — a second-line opinion, structurally separate from whoever built the system.
  • Standard-based — every assessment runs against a defined, published standard.
  • Examiner-ready — a complete, defensible evidence package designed to support supervisory review.
  • Full-spectrum — one method for generative assistants and autonomous agents alike.

Our approach

One standard, applied end to end.

01

Validate

A rigorous, independent assessment of each system before it goes live — with a formal opinion and an examiner-ready evidence package.

02

Assure

Continuous professional oversight in production — exception review, control testing, and monitoring against defined tolerances.

03

Evidence

Clear documentation mapped to SR 26-2 and the NIST AI RMF, produced on a defined cadence for the board and the regulator.

Our team

Built by a model risk practice, not a startup.

Attestor is an independent firm founded by the team behind Kevin D. Oden & Associates (KDOA), a model risk management, validation, and AI/ML governance practice. Our people are experienced quantitative analysts, model validators, and MRM practitioners who have collectively delivered hundreds of independent validations across banks and financial institutions. Assurance is not an adjacent product for us — it is the discipline we have practiced for years, now applied to AI. Standing as an independent firm is deliberate: independence is the value we deliver, and it should be true of who we are, not just what we do. The track record below is the KDOA team’s, earned over years of independent validation — and the same team leads every Attestor engagement. Client relationships and validation records remain with Kevin D. Oden & Associates.

KO

Kevin D. Oden, PhD

Founder

Kevin founded Attestor and leads Kevin D. Oden & Associates, its model risk management and AI/ML governance practice. He holds a PhD in mathematics from UCLA, has served on the faculty at Harvard, and founded the Model Validation Consortium at ProSight Financial Association (formerly RMA). His work spans quantitative model risk, validation methodology, and the emerging discipline of agentic-AI assurance.

500+
Validations delivered by the KDOA team
50+
Institutions served by KDOA
SR 26-2
& NIST AI RMF aligned

Bring independent confidence to your AI.

A short scoping conversation lets us map your AI systems, classify their risk, and recommend a path — including a focused pilot before a broader program.

Start a conversation