Thinking

Brand strategy for regulated AI

Selling AI into a regulated industry is a different commercial exercise from selling AI to anyone else, and most of the branding advice in circulation is actively wrong for it. The buyer is not excited by capability. They are calculating what happens if this goes wrong and they have to explain it.

Debrief · 22 July 2026 · 8 min read

The buyer is buying defensibility

A compliance director at a mid-size lender is not evaluating whether your model is impressive. They are evaluating whether, in two years, when a regulator asks why a particular decision was made, there is an answer they can give without losing their job.

That reframes every message on your website. Speed matters only if it is auditable. Automation matters only if there is a human in the loop where regulation requires one. Accuracy matters far less than the ability to reconstruct how an output was produced. A capability claim that would land in any other category, “our model outperforms,” is nearly irrelevant here, and the swagger that sells it elsewhere reads as a risk signal.

Three constituencies, one position

Regulated deals are almost never signed by one person, and the three people involved want incompatible things.

The economic buyer wants a business case: cost per case, throughput, headcount avoided, time to decision. They are comparing against a spreadsheet.

The compliance function wants to know how it fails, who is accountable, what the audit trail looks like and how it maps to the specific rules they are examined against. They cannot approve what they cannot explain.

The technical evaluator wants architecture, data residency, model provenance, integration surface and what happens at the security review.

One position has to survive all three readings without contradicting itself. The most common failure is a site written entirely for the economic buyer, which means the deal reaches the compliance review with none of the necessary groundwork done, and stalls there for a quarter.

What this does to the visual language

The category defaults actively hurt you here. Glowing gradients and particle fields signal “consumer AI”, and consumer AI is precisely the thing a regulated buyer has been told to be careful of. The visual brief is closer to instrumentation than to magic: structure, legibility, precision, calm.

When we built the identity for Gilagu, the company behind Ordo, a regulation rule engine for financial services, insurance and mortgage teams, the system was built on hexagonal geometry for exactly this reason. Structure, connectivity and precision are what the buyer is purchasing, so they are what the identity should communicate. Paired with a serif for gravitas and a functional sans for clarity, the result reads as considered and credible rather than attention-seeking. In this category, restraint is not a style choice. It is a trust mechanism.

Proof beats promise, and specificity beats proof

Regulated buyers discount claims heavily and weight evidence heavily. The assets that move a regulated deal are unglamorous: named customer references in the same regulatory perimeter, third-party certifications, documented model governance, a security page that answers questions before they are asked, and written detail about how exceptions are handled.

Specificity is the single strongest signal available to you. “Built for financial services” means nothing. “Built for FCA-regulated mortgage intermediaries handling affordability assessments” means you have met people like them. The narrower claim wins the deal, and it also wins the language-model answer, when a buyer asks an assistant who builds compliance tooling for mortgage intermediaries, specific companies get named and general ones do not.

The pace of the sale changes everything

Regulated sales cycles run six to eighteen months and pass through procurement, security review, legal, and often a pilot with defined success criteria. The brand has to survive that whole distance, being reread by people who joined the process at month four with no context.

Practically, that means investing in the assets most consumer-facing companies neglect: a genuinely useful documentation site, a security and compliance page that reads as though a serious person wrote it, case studies with real numbers, and collateral your champion can forward internally without having to explain it. The champion is selling on your behalf in rooms you will never enter. Everything you publish is either helping them or making their job harder.