> ## Content Index
> Fetch the complete content index at: https://blog.aperion.ai/llms.txt
> Use this file to discover other available public pages before exploring further.

# Comment letter: the proposed third-party risk management guidance and AI
- URL: https://blog.aperion.ai/tprm-guidance-comment-letter/
- Published: 2026-10-15T12:19:22.000Z
- Updated: 2026-10-15T12:34:44.000Z
- Description: On October 14, 2026, APERION filed a comment letter with the OCC, the Federal Reserve, the FDIC and the NCUA on their proposed third-party risk management guidance.
- Author: Craig Alberino

On October 14, 2026, APERION filed a comment letter with the OCC, the Federal Reserve, the FDIC and the NCUA on their proposed third-party risk management guidance (91 FR 58536, September 15, 2026).

The proposal would replace the 2023 interagency guidance that banks use to oversee their vendors, AI vendors included. It does not mention artificial intelligence. In April, revised model risk management guidance, SR 26-2, placed generative and agentic AI outside its own scope. If the proposal is finalized as written, AI sits outside one framework by carve-out and inside the other only by inference.

The letter makes five recommendations. The first asks for one sentence: that AI services are covered on the same risk-based terms as any other third-party relationship. It adds no new obligation.

Comments close November 16, 2026.

[Comment letter of Aperion, Inc.As filed October 14, 2026, with the OCC, Federal Reserve, FDIC and NCUAAPERION\_Comment\_Letter\_TPRM\_Guidance\_2026-10-14.pdf82 KBdownload-circle](https://blog.aperion.ai/content/files/2026/10/APERION%5FComment%5FLetter%5FTPRM%5FGuidance%5F2026-10-14.pdf "Download")