Research

Compliance needs a model of its own.

General AI is built to be adequate at everything. Compliance is not an everything problem: it is decided against one institution's own framework, and examined years later by someone who was not in the room.

Every serious field has already built its own model.

The pattern is now old enough to be reported rather than predicted. When a field with its own language, its own documents and its own idea of a correct answer builds a model for itself, that model does better inside the field than a general model does. It has happened in medicine, in law, in finance, in science and in software, and it has happened often enough that the burden of proof has moved.

The research is public and it is consistent. Models pre-trained on biomedical literature read biomedical writing more accurately than models pre-trained on the open web. Models pre-trained on legal corpora do better on legal tasks, and the gain is largest precisely where the task is most distinctively legal, which is the opposite of what you would see if the advantage were a rounding error. The same holds for scientific text, for financial language and for code.

None of this says a general model is bad. It says a general model is general. Breadth is bought somewhere, and it is bought in depth.

FieldWhat was builtWhat the research found
MedicineBioBERT, and later work on domain pre-training for biomedical languageLee and colleagues (2019); Gu and colleagues (2020): pre-training on the field’s own literature beats starting from general web text, and building in-domain from scratch beats adapting a general model afterwards.
MedicineMedical question answering treated as a medical problem rather than a general oneSinghal and colleagues (2022) and (2023): purpose-built medical systems were shown to approach expert-level answers on medical examination questions.
LawLEGAL-BERT, and the CaseHOLD task built to test legal reasoning properlyChalkidis and colleagues (2020); Zheng and colleagues (2021): domain pre-training helps most on the tasks that are most distinctively legal.
FinanceBloombergGPT and FinBERT, trained on the field's own documentsWu and colleagues (2023); Araci (2019): a model trained on financial material does better on financial tasks while holding up on general ones.
ScienceSciBERT, pre-trained on scientific publicationsBeltagy and colleagues (2019): scientific writing has its own vocabulary, and a model that learned it reads the literature better.
SoftwareCode models, and a code-specific benchmark to judge them byChen and colleagues (2021): the field built models for its own work and, in the same breath, the test it wanted them measured on.

Five fields, the same move. In each one the specialist model was built and then measured on the field’s own tasks rather than on a general test, because a field cannot claim an advantage it has no way to measure.

What a specialist actually gains.

The gain is not vocabulary alone, though vocabulary is where it starts. A field’s model learns the shapes its documents come in, what a complete answer looks like, and which of the many true things you could say are the ones that matter. Above all it learns the field’s standard of evidence.

That last one transfers least, and it is the one that decides this argument. Every field has a rule about what makes an answer good enough. In science it is reproducibility. In law it is authority. In compliance it is something narrower and harder, and it is worth stating exactly.

Breadth is bought somewhere, and it is bought in depth.

Compliance is not another vocabulary. It is a different test.

Most domains can be marked against something public. A legal question can be marked against statutes and decided cases. A medical question can be marked against the literature. Anyone who disagrees with the mark can go and read the same source.

Compliance cannot be marked that way. The right answer to a compliance case depends on the law plus the institution’s own framework: its risk assessment, its risk appetite, its rules and its thresholds. The same customer, with the same documents, can be correctly approved at one institution and correctly declined at another. Both institutions are compliant. Neither is making it up.

PUBLIC

A general question

Marked against a source anyone can open.

A disagreement about the mark is settled by reading the source together.

CONFIDENTIAL

A compliance decision

Marked against the law plus one institution’s own framework.

The standard is not published, and the person checking your answer may arrive years later.

There is a second property, and people outside the work tend to underestimate it. A compliance decision is not finished when it is made. It is finished when it survives examination, by an auditor or a supervisor, long after the person who made it has moved on. The decision has to carry its own justification with it, because whoever judges it was not in the room.

What compliance work demands.

A private standard and a delayed examination together generate a specific list of demands. These are the seven properties Brayns LLM is built around, and the same seven ComplianceBench measures.

WHAT COMPLIANCE WORK DEMANDS OF A MODEL
01Decision accuracyThe decision matches the one a senior analyst reaches on the same file. Every other property on this list exists to serve it.
02Screening precision and coverageWhat should be caught is caught and the noise stays out, measured against the institution's own thresholds rather than a general sense of risk.
03Evidence groundingEvery conclusion points at something in the case file. Nothing is asserted that cannot be shown to the person asking.
04ConsistencyThe same facts produce the same decision, however the file happens to be arranged.
05Policy adherenceThe institution's written procedure wins, including where the model's own instinct would go the other way.
06Escalation at uncertaintyWhere the file is incomplete or the procedure calls for a person, the correct output is to stop and say so.
07Auditable reasoningThe reasoning is recorded in a form someone can examine later and either accept or challenge.

Read that list the way a supervisor would. Each line is a question you can be asked about a decision you already made, and for each one there is an answer that ends the conversation and an answer that does not.

The gaps are structural, not incidental.

A general model does not fail these demands by accident. It fails them because of what it was optimised to be. It was trained to be helpful and agreeable across every subject at once, and both of those pull against what the list above asks for.

DimensionWhat a general model gives you instead
Evidence groundingConfident citation of authority that does not exist. Dahl and colleagues (2024) profiled the behaviour across legal questions and found it common rather than occasional.
ConsistencyAn answer that moves with presentation. Lu and colleagues (2021) showed that reordering the same material changes the output; Liu and colleagues (2023) showed that where a fact sits in a long document changes whether it is used at all.
Policy adherenceAgreement. Sharma and colleagues (2023) documented a tendency to move towards the view the user has already expressed, which is the opposite of holding to a written procedure.
Escalation at uncertaintyAn answer, delivered whether or not one is warranted. Kadavath and colleagues (2022) found that models carry usable information about their own uncertainty, which is why stopping is trainable and why it does not happen on its own.
Auditable reasoningA plausible explanation produced alongside the answer, with no guarantee that it describes what the answer actually rested on.
Screening precision and coverageA general sense of risk, calibrated to nothing in particular and certainly not to your thresholds.
Decision accuracyWhatever falls out of the six above.

Take grounding first, because it has the most direct evidence behind it. Work profiling legal question answering found that general models assert authority which does not exist, in a confident register, often enough to call it a property rather than a glitch. The compliance equivalent is a memo citing a rule the institution does not have, or a register entry that was never made. That is worse than a plainly wrong answer, because a plainly wrong answer invites a check and a well-dressed one does not.

Consistency fails more quietly. The same case, reordered or reformatted, can produce a different decision. Research on prompt ordering showed that permuting the same material moves the result, and research on long contexts showed that the position of a fact changes whether the model uses it at all. In conversation that is variety. In compliance it means two customers with identical facts can be treated differently because one file happened to be arranged differently, which is precisely what an examination is looking for.

The same customer, the same documentsOne case
Presented as a tidy summary
ApproveThe declaration is taken at face value.
Presented as the source documents
EscalateThe ownership arithmetic contradicts the declaration.

Nothing about the customer changed between these two readings. Only the arrangement of the file did. A model whose decision moves with the arrangement cannot be relied on to treat two customers alike, and being able to show that you treated them alike is most of what consistency means in regulated work.

Escalation and policy adherence fail together, for the same underlying reason. A general model is trained to be helpful, on feedback from people who prefer answers to refusals. Research on sycophancy has documented the result: a drift towards the view the user has already expressed. A model shaped that way will produce a decision where it should stop, and will fold when an analyst pushes back even where the written procedure says it should not. Calibration research is the encouraging half of this. Models do carry usable information about how likely they are to be right, so knowing when to stop is a trainable property. It is simply not what general training optimises for.

A model that stops is an operational cost. A model that is confidently wrong is an operational risk, and the difference grows the longer the decision has to stand.

Auditability looks solved and is not. A general model will readily produce an explanation next to its answer. The explanation is generated text, though, and nothing guarantees that it describes the process which produced the answer rather than a plausible account of it. An auditor is not asking for a plausible account. They are asking what the decision actually rested on, and whether the same thing would produce the same decision again.

Decision accuracy and screening precision sit downstream of all of it. A model with no representation of your risk appetite has no way to hit your thresholds, and a model that cannot hold to your procedure cannot reach the decision your procedure prescribes. They are not separate failures. They are the visible surface of the five above.

A model built for compliance.

The conclusion is not that general AI is disappointing. It is that compliance is a domain, in the same sense that medicine and law are domains, and that every field which took its own work seriously ended up building for itself. Compliance is late to this rather than exempt from it.

Brayns LLM is that model. It is built for compliance work and nothing else, around the seven properties above, because those are the properties the work is judged on rather than the properties that are convenient to demonstrate.

A claim like that carries one more obligation, and it is the reason ComplianceBench exists. A model built for a field has to be measurable in that field, by people who do not work here, against answer keys they can read for themselves. Some of the fields above did build that for themselves. Software shipped its model and the test it wanted to be judged on in the same paper. Law came to it later and collaboratively, where Guha and colleagues (2023) assembled a legal reasoning benchmark with the profession rather than around it. Compliance had neither. It now has the benchmark, published in full and open to challenge, which is what turns the rest of this argument into something you can check rather than something you have to take on trust.

See Brayns in your environment. Book a demo →