German retail bank auditors need training to test AI agents used in consumer credit, account servicing and payment disputes. That means testing the decision record for approvals, certificates and provenance, checking credit uses against the AI Act and Article 22, and confirming DORA covers the agent provider. The audit judgement stays theirs. BaFin, ECB supervision, GDPR and DORA frame it.
What do internal auditors at a German retail bank focus on?
German retail banking is shaped by its savings banks and cooperative banks alongside the large private banks. Internal audit in each must meet BaFin's minimum requirements for risk management, which give it a mandate to audit all activities and processes on a risk-based cycle and to report independently to management and the supervisory board. Significant institutions also answer to ECB banking supervision.
The retail cycle covers consumer and mortgage lending, overdraft facilities, account and card servicing, SEPA payment disputes and chargebacks, outsourcing to group service providers, and IT. Since DORA, ICT third-party risk and resilience testing are fixed items on the plan.
How do agents change the audit universe?
Banks are deploying agents in high-volume processes. For each, audit needs to know the certified depth.
| Use | Depth | Audit focus |
|---|---|---|
| Consumer credit file preparation | 1 to 2 | Who decided, and whether the use is high-risk |
| Payment dispute handling | 2 | Who approved each refund or rejection |
| Account servicing requests, such as address changes | 3 within limits | Provenance of the request and the bank's limits |
| Customer letters in German | 2 | Accuracy and approval |
Audit's own agent can test full populations from the append-only record at depth 1, such as every dispute refund in a quarter, and draft workpapers at depth 2.
What must auditors learn, and what stays with them?
Credit is the first area to understand. Creditworthiness assessment of individuals is high-risk under the EU AI Act, and under GDPR Article 22 a credit score can count as a decision in its own right where it plays a determining role in whether credit is granted, as the EU's highest court has held. An auditor must be able to test whether a person meaningfully decided each credit application, rather than approving the agent's summary unread. Our guide on how internal auditors review an AI agent's decisions gives the test design.
Account servicing tests provenance. An address change request received by email is external; one made through the authenticated banking app is signed by an identified customer. A change of address followed by a card reissue is a classic fraud pattern, so audit should test that external requests were held for a person. Our list of what internal auditors should never let an AI agent do includes acting on external instructions to change contact details.
Certification is third. Depth is earned through Attest on the bank's own past cases; the role sets a ceiling and evidence sets the depth, and the lower wins. Certificates lapse after 90 days. Auditors test certificate history against action dates.
What stays with the auditor: the audit plan, the findings and their severity, and the report to the board. Audit should not approve held business actions, to protect its independence.
Which German rules shape oversight and literacy?
BaFin supervises German banks, and its minimum requirements for risk management set expectations for internal audit, outsourcing, IT and the governance of new processes. When an agent takes over part of a process, it falls within those expectations, and audit must be competent to test it. ECB banking supervision applies to significant institutions, and the EBA sets EU-wide guidelines.
The EU AI Act requires AI literacy among staff operating AI systems under Article 4. Annex III lists creditworthiness assessment and credit scoring of natural persons as high-risk, bringing in Article 26 deployer duties, Article 14 human oversight, Article 12 logging and, for such deployers, the Article 27 fundamental rights impact assessment.
GDPR applies throughout: Article 22 on solely automated decisions, Article 35 impact assessments and Article 30 records. Germany's data protection authorities supervise. DORA applies from 17 January 2025 and covers ICT risk, incident reporting, testing and third-party risk, including the agent provider.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
A 90-day training plan
Month one. All auditors complete basic literacy on governed agents. The head of internal audit lists each agent in the audit universe with capabilities, depth and certificate dates.
Month two. Pilot an audit of consumer credit file preparation. Test classification under the AI Act, whether people decided each application with evidence of review, provenance of income data, and certificate currency.
Month three. Audit account servicing for external requests, test the DORA register entry for the agent provider, and write the standing programme. Record training in the training plan template for internal auditors and set up banking corrections for audit's agent.
Where the Academy fits
Pryme Intelligence Academy runs Foundations free for the whole audit function and the Operator track for auditors who lead agent audits. Operator includes eight modules, among them how a governed agent decides and reading the workspace, which map directly onto audit testing. Certificates are valid for 12 months and can be checked at source through VerifyDoc.ai.
Questions people ask
Does the agent provider count as an outsourcing arrangement?
Often yes, and under DORA it is an ICT third-party service. Audit should test that the bank assessed, contracted and monitored it accordingly.
Can audit rely on the provider's own assurance reports?
They help, but they cover the provider's controls. Audit still tests the bank's bounds, approvals and records.
What makes audit the real control here?
It tests whether credit decisions were truly made by people. Our piece on why internal auditors are the real control explains, and the guide to AI agent skills by role covers other roles.