1. Define the financing decision
Fix the applicant, funding purpose, amount, currency, tenor, completion date and decision authority.
The controlled record includes applicant; purpose; amount; currency; tenor; date; authority; evidence. The immediate deliverable is an approved financing charter. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when product selection begins before the economic need and cash source are fixed. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for define the financing decision should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
2. Map the legal and economic perimeter
Reconcile operating companies, asset owners, licensors, service entities, customers, sponsors and guarantors.
The controlled record includes entity; owner; role; jurisdiction; asset; obligation; guarantee; source. The immediate deliverable is a source-linked obligor and asset map. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when cash generation and contractual obligations sit in different entities. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for map the legal and economic perimeter should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
3. Establish Shariah governance
Assign board, management, business, legal, risk, finance, compliance, internal control, audit and qualified Shariah responsibilities.
The controlled record includes role; person; competence; authority; review; approval; escalation; record. The immediate deliverable is a Shariah governance and decision matrix. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when commercial teams treat Shariah review as a documentation step after pricing. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for establish shariah governance should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
4. Build the evidence inventory
Catalogue contracts, licences, invoices, purchase orders, asset records, service levels, data rights, cash flows and approvals.
The controlled record includes source; owner; entity; period; right; obligation; restriction; status. The immediate deliverable is a controlled financing evidence index. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when document volume substitutes for proof of ownership, delivery and permitted use. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for build the evidence inventory should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
5. Decompose the AI business model
Separate hardware sale, equipment use, cloud consumption, software licence, subscription, implementation, support, data and outcome-based services.
The controlled record includes offer; customer; asset; service; right; obligation; price; timing. The immediate deliverable is an AI economic-component map. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when one technology label conceals distinct assets and performance obligations. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for decompose the ai business model should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
6. Classify tangible hardware
Identify servers, accelerators, storage, networking, cooling, power equipment, edge devices and embedded systems.
The controlled record includes asset; specification; serial; owner; location; supplier; value; evidence. The immediate deliverable is a verified hardware register. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when generic capacity is financed without confirming identifiable assets or title. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for classify tangible hardware should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
7. Classify software and licences
Map proprietary code, third-party licences, open-source components, access rights, duration, territory, users, renewal and termination.
The controlled record includes software; owner; licence; user; term; territory; fee; restriction. The immediate deliverable is a software-rights schedule. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when a revocable or non-transferable access right is treated as a saleable asset. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for classify software and licences should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
8. Classify services and usufruct
Separate implementation, integration, training, hosting, inference, maintenance, support and measurable use rights.
The controlled record includes service; provider; recipient; unit; period; acceptance; dependency; evidence. The immediate deliverable is a service and usufruct matrix. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when undefined future effort is financed as a presently deliverable benefit. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for classify services and usufruct should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
Table 1. AI cash-flow decomposition
| Component | Primary evidence | Decision |
|---|---|---|
| hardware | title, delivery and acceptance | sale or lease perimeter |
| software | ownership and licence rights | right and term |
| service | scope, unit and performance | measurable benefit |
| cash | contract, invoice and collection | payment capacity |
Illustrative classifications require transaction-, institution-, customer-, jurisdiction- and qualified Shariah-specific approval.
Values are illustrative indices and require replacement with approved transaction evidence.
9. Test asset and benefit eligibility
Submit the actual asset, use, service, right, risk allocation and contract sequence for qualified Shariah determination.
The controlled record includes subject; owner; use; contract; sequence; risk; reviewer; resolution. The immediate deliverable is an eligibility and resolution pack. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when labels such as lease or partnership replace substance and approval. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for test asset and benefit eligibility should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
10. Verify ownership and possession
Evidence legal ownership, constructive possession, control, delivery, location, acceptance and transfer timing.
The controlled record includes asset; seller; buyer; title; possession; delivery; acceptance; date. The immediate deliverable is an ownership and possession trail. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when sale obligations arise before the financier acquires the relevant asset or control. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for verify ownership and possession should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
11. Map cash-flow states
Connect proposal, order, procurement, delivery, acceptance, invoice, receivable, collection, operating cost and distributable cash.
The controlled record includes state; contract; party; amount; date; condition; cash; source. The immediate deliverable is an evidence-linked cash-flow state model. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when accounting revenue is mistaken for available payment capacity. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for map cash-flow states should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
12. Test customer contract durability
Review term, volume, usage, price, service level, acceptance, credits, cancellation, renewal, data access and change control.
The controlled record includes customer; contract; term; volume; price; right; remedy; evidence. The immediate deliverable is a contract durability schedule. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when forecast cash extends beyond enforceable customer commitments. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for test customer contract durability should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
13. Reconstruct collections
Tie invoices and usage records to acceptance, credit notes, disputes, receipts and allocation by customer.
The controlled record includes customer; invoice; usage; due; dispute; receipt; allocation; evidence. The immediate deliverable is a collection evidence bridge. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when bank credits are treated as eligible operating proceeds without reconciliation. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for reconstruct collections should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
14. Separate recurring and contingent consideration
Distinguish fixed fees, usage charges, minimum commitments, milestones, variable consideration, bonuses, penalties and refunds.
The controlled record includes charge; basis; condition; period; amount; cap; source; treatment. The immediate deliverable is a consideration classification schedule. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when conditional or refundable amounts are treated as fixed payment capacity. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for separate recurring and contingent consideration should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
15. Test supplier and cloud dependencies
Map hardware vendors, foundries, distributors, cloud platforms, model providers, data suppliers, support and substitution routes.
The controlled record includes supplier; input; term; concentration; right; arrears; alternative; impact. The immediate deliverable is a dependency and continuity map. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when customer cash is projected without the inputs needed to deliver the service. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for test supplier and cloud dependencies should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
16. Reconcile asset life and contract life
Compare technical obsolescence, useful life, licence term, support period, customer duration, financing tenor and residual value.
The controlled record includes component; start; end; renewal; obsolescence; residual; tenor; gap. The immediate deliverable is a life and tenor alignment model. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when financing outlives the productive asset or contracted cash flow. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for reconcile asset life and contract life should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
Table 2. Life and tenor alignment
| Dimension | Required test | Control |
|---|---|---|
| hardware | useful life and obsolescence | residual value |
| software | licence, renewal and termination | access continuity |
| customer | contract duration and remedies | cash support |
| financing | payment and maturity profile | tenor alignment |
Illustrative classifications require transaction-, institution-, customer-, jurisdiction- and qualified Shariah-specific approval.
Values are illustrative indices and require replacement with approved transaction evidence.
17. Test data rights and permitted use
Trace consent, ownership, licence, purpose, retention, localisation, confidentiality, training rights and deletion obligations.
The controlled record includes dataset; subject; owner; basis; purpose; user; location; control. The immediate deliverable is a data-rights control map. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when financed services rely on data the business cannot lawfully or contractually use. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for test data rights and permitted use should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
18. Test intellectual-property control
Verify code ownership, employee and contractor assignment, encumbrance, infringement exposure, licence dependencies and enforcement.
The controlled record includes asset; creator; owner; assignment; licence; lien; claim; evidence. The immediate deliverable is an IP ownership and dependency register. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when enterprise value and payment capacity depend on unverified intellectual property. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for test intellectual-property control should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
19. Compare sale-based structures
Assess asset identification, financier purchase, possession, disclosed cost and profit, delivery sequence, payment terms and remedies.
The controlled record includes asset; seller; financier; customer; cost; profit; sequence; remedy. The immediate deliverable is a sale-structure decision pack. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when a cash loan is documented through circular or unsupported asset trades. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for compare sale-based structures should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
20. Compare lease-based structures
Assess owned asset or measurable usufruct, lease period, rent, maintenance, insurance, impairment, termination and end-of-term treatment.
The controlled record includes subject; owner; lessee; benefit; rent; term; maintenance; residual. The immediate deliverable is a lease-structure decision pack. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when rent starts before usable delivery or ownership risk remains entirely with the customer. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for compare lease-based structures should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
21. Compare partnership structures
Assess capital contributions, ownership, profit-sharing, loss allocation, management, valuation, transfer and exit.
The controlled record includes partner; contribution; ownership; profit; loss; control; transfer; exit. The immediate deliverable is a partnership-structure decision pack. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when fixed repayment and return obligations remove genuine partnership risk. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for compare partnership structures should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
22. Compare agency structures
Define principal, agent, mandate, discretion, fee, incentive, custody, investment rules, reporting and liability.
The controlled record includes principal; agent; mandate; asset; fee; incentive; duty; report. The immediate deliverable is an agency-structure decision pack. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when agency obscures who owns assets, bears risk or authorises investment. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for compare agency structures should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
23. Design a hybrid structure
Combine only compatible contracts with independent purpose, correct sequence, separate consideration and approved documentation.
The controlled record includes component; contract; purpose; sequence; price; dependency; approval; result. The immediate deliverable is an approved hybrid transaction map. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when multiple labels conceal one economically inconsistent arrangement. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for design a hybrid structure should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
24. Build the sources-and-uses model
Reconcile purchase price, implementation, eligible services, taxes, fees, reserves, equity, contingencies and cash release.
The controlled record includes use; amount; eligibility; payer; recipient; timing; evidence; condition. The immediate deliverable is a controlled sources-and-uses schedule. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when funds are released for undefined or ineligible expenditure. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for build the sources-and-uses model should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
Table 3. Structure comparison
| Route | Economic subject | Primary gate |
|---|---|---|
| sale | identified asset and transfer | ownership and possession |
| lease | owned asset or measurable benefit | delivery and ownership risk |
| partnership | capital and shared outcome | genuine profit and loss allocation |
| agency | authorised mandate | ownership and duty |
Illustrative classifications require transaction-, institution-, customer-, jurisdiction- and qualified Shariah-specific approval.
Values are illustrative indices and require replacement with approved transaction evidence.
25. Model operating payment capacity
Forecast collections, cloud and hardware costs, payroll, tax, maintenance, working capital, reserves and required liquidity.
The controlled record includes period; receipt; cost; tax; working capital; reserve; payment; balance. The immediate deliverable is an integrated operating cash forecast. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when contractual instalments follow headline revenue instead of available cash. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for model operating payment capacity should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
26. Build downside cases
Stress utilisation, customer delay, churn, model-price changes, hardware failure, supplier interruption, cyber events, currency and refinancing.
The controlled record includes case; driver; range; dependency; cash; threshold; action; owner. The immediate deliverable is a downside financing scenario set. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when one central forecast conceals correlated technology and collection shocks. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for build downside cases should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
27. Allocate technology and performance risk
Assign delivery, acceptance, uptime, quality, obsolescence, maintenance, cybersecurity, data, model and vendor risks.
The controlled record includes risk; cause; bearer; control; remedy; insurance; residual; evidence. The immediate deliverable is a technology risk-allocation matrix. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when all commercial and ownership risks are transferred to one party regardless of contract substance. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for allocate technology and performance risk should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
28. Calibrate payment and profit
Align rent, deferred price, profit share, agency fee or incentive to approved structure, cash capacity, risk and disclosure.
The controlled record includes payment; basis; amount; period; trigger; cap; disclosure; approval. The immediate deliverable is a structure-specific payment model. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when return is engineered independently of the underlying contract and performance. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for calibrate payment and profit should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
29. Design security and support
Map title, collateral, guarantees, reserves, assignments, account controls, insurance and enforcement without changing the approved contract substance.
The controlled record includes support; provider; beneficiary; asset; priority; condition; remedy; evidence. The immediate deliverable is a security and support schedule. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when credit support contradicts ownership, partnership or loss-allocation principles. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for design security and support should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
30. Design covenants and information rights
Link reporting, liquidity, asset, licence, customer, technology, compliance and event covenants to observable risks.
The controlled record includes risk; covenant; metric; threshold; frequency; evidence; cure; consequence. The immediate deliverable is an early-warning covenant architecture. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when covenants detect failure after cash, licences or essential services have already disappeared. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for design covenants and information rights should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
31. Test accounting and tax interfaces
Document structure-specific recognition, measurement, revenue, lease, impairment, VAT, corporate tax and transfer-pricing questions.
The controlled record includes entity; contract; accounting; tax; period; judgement; adviser; evidence. The immediate deliverable is an accounting and tax issue register. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when commercial approval assumes an accounting or tax outcome that has not been determined. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for test accounting and tax interfaces should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
32. Control consumer and conduct risk
Test suitability, disclosure, fairness, sales practice, complaint, vulnerable-customer and product-governance requirements where applicable.
The controlled record includes customer; product; disclosure; channel; risk; control; complaint; outcome. The immediate deliverable is a conduct and product-governance pack. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when technical compliance displaces fair customer treatment and clear disclosure. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for control consumer and conduct risk should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
Table 4. Technology risk allocation
| Risk | Evidence | Response |
|---|---|---|
| obsolescence | road map and asset life | tenor and residual control |
| service failure | SLA and incident history | remedy and continuity |
| data rights | licence, consent and purpose | access restriction |
| vendor concentration | contract and alternatives | substitution plan |
Illustrative classifications require transaction-, institution-, customer-, jurisdiction- and qualified Shariah-specific approval.
Values are illustrative indices and require replacement with approved transaction evidence.
33. Govern AI-supported structuring
Inventory models, prompts, sources, purposes, versions, validation, confidentiality, bias, overrides and accountable reviewers.
The controlled record includes model; task; data; version; source; limitation; reviewer; approval. The immediate deliverable is an AI structuring-governance register. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when generated classifications or contract suggestions are treated as qualified Shariah or legal opinions. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for govern ai-supported structuring should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
34. Validate models and calculations
Back-test cash classification, forecasts, pricing, impairment, eligibility flags and document extraction by product and customer cohort.
The controlled record includes model; population; period; metric; threshold; result; drift; action. The immediate deliverable is a model-validation and reconciliation pack. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when aggregate accuracy hides errors in rare assets, languages or contractual structures. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for validate models and calculations should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
35. Build the approval memorandum
Align commercial purpose, legal form, economic substance, cash model, risks, accounting, tax, regulatory and qualified Shariah analysis.
The controlled record includes claim; source; author; reviewer; exception; resolution; approval; date. The immediate deliverable is a controlled approval memorandum. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when different committees approve incompatible descriptions of the same transaction. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for build the approval memorandum should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
36. Control documentation and sequencing
Track offer, promise, purchase, possession, sale, lease, partnership, agency, security, conditions and notices in approved order.
The controlled record includes document; party; prerequisite; signature; effective date; evidence; owner; status. The immediate deliverable is a document and sequence tracker. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when documents become effective in a sequence that defeats the intended structure. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for control documentation and sequencing should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
37. Gate conditions and cash release
Verify KYC, ownership, licences, approvals, contracts, assets, insurance, equity, accounts, security and draw conditions.
The controlled record includes condition; party; owner; due; evidence; status; consequence; closure. The immediate deliverable is a conditions and funding tracker. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when signature is treated as completion before assets, approvals and funded cash are verified. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Contract names do not determine substance. The actual asset, benefit, ownership, possession, risk, consideration, sequence and cash consequences require qualified review for the relevant parties and jurisdiction.
The decision pack for gate conditions and cash release should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
38. Monitor Shariah and commercial performance
Refresh asset use, ownership, collections, service delivery, payment, covenant, exception, incident and remediation evidence.
The controlled record includes signal; baseline; threshold; result; owner; action; due; outcome. The immediate deliverable is an integrated monitoring dashboard. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when monitoring tests payment only and misses changes to assets, rights or contract performance. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
Hardware, software licences, subscriptions, implementation and data services create different rights and obligations. Each component needs its own evidence before structure selection.
The decision pack for monitor shariah and commercial performance should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
39. Manage amendments and restructurings
Reassess changed assets, services, price, tenor, counterparties, waivers, capitalisation, settlements and termination consequences.
The controlled record includes change; reason; contract; cash; risk; approval; document; outcome. The immediate deliverable is an amendment and restructuring protocol. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when commercial amendments accumulate without renewed legal and qualified Shariah review. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
AI may accelerate bounded extraction, reconciliation and scenario analysis over approved records. It cannot replace the competent legal, regulatory, accounting, tax, credit or Shariah professionals responsible for the decision.
The decision pack for manage amendments and restructurings should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
40. Close through accountable gates
Use purpose, perimeter, eligibility, ownership, structure, cash, risk, approval, documentation, funding and monitoring gates.
The controlled record includes phase; scope; threshold; evidence; exception; approver; decision; outcome. The immediate deliverable is an evidence-gated financing execution plan. Preserve entity, contract, asset, service, period, currency, source, reviewer, approval and unresolved exceptions.
The principal failure occurs when model or document completion is confused with valid and funded execution. Reviewers should reconstruct the transaction, test legal and cash consequences under downside conditions and identify who can approve the conclusion.
The decision record should preserve sources, assumptions, alternatives, limitations, reviewers, approvals and later outcomes. Material changes require targeted revalidation before amendment or funding.
The decision pack for close through accountable gates should show the prior view, correction, value or risk at stake, alternatives, owner, due date, next evidence gate and observed result. Any exception requires closure evidence and an explicit effect on structure, payment, protection or monitoring.
Table 5. Financing execution gates
| Gate | Primary work | Completion evidence |
|---|---|---|
| eligibility | asset, service, use and approval | qualified resolution |
| structure | ownership, sequence and cash | approved documents |
| capacity | forecast, downside and support | payment envelope |
| funding | conditions, assets and cash | verified release |
Illustrative classifications require transaction-, institution-, customer-, jurisdiction- and qualified Shariah-specific approval.
Values are illustrative indices and require replacement with approved transaction evidence.
References
- Central Bank of the UAE, Standard Re. Shari'ah Governance for Islamic Financial Institutions, https://rulebook.centralbank.ae/en/entiresection/2825
- Central Bank of the UAE, General Requirements for Shari'ah Governance Standard, https://rulebook.centralbank.ae/en/rulebook/article-5-general-requirements-shariah-governance-standard
- Central Bank of the UAE, Standard Re. Shari'ah Compliance Function at Islamic Financial Institutions, https://rulebook.centralbank.ae/en/rulebook/article-1-introduction-11
- Central Bank of the UAE, Regulation on Shari'ah Compliance for Financial Services, https://rulebook.centralbank.ae/en/rulebook/article-11-shari%E2%80%99ah-compliance-financial-services
- Central Bank of the UAE, Islamic Banking Corporate Governance Requirements, https://rulebook.centralbank.ae/en/rulebook/article-14-islamic-banking
- Central Bank of the UAE, Internal Shari'ah Supervision, https://rulebook.centralbank.ae/en/rulebook/article-75-internal-shariah-supervision
- Islamic Financial Services Board, Technical Note on Financial Inclusion and Islamic Finance, https://www.ifsb.org/wp-content/uploads/2023/10/TN-3_-Technical-Note-on-Financial-Inclusion-and-Islamic-Finance_En.pdf
- Islamic Financial Services Board, Guiding Principles on Shari'ah Governance Systems, https://www.ifsb.org/standards-page/
- Accounting and Auditing Organization for Islamic Financial Institutions, Shari'ah Standards, https://aaoifi.com/shariaa-standards/?lang=en
- Accounting and Auditing Organization for Islamic Financial Institutions, Exposure Draft on Ijarah, https://aaoifi.com/wp-content/uploads/2018/12/Exposure-Draft-No.-F02-2018-Ijarah-v5.3-Final-For-Issuance.pdf
- Dubai Financial Services Authority, The DFSA's Approach to Regulating Islamic Finance, https://www.dfsa.ae/application/files/2515/8220/1523/Islamic-Finance-Regulation-English.pdf
- Dubai Financial Services Authority, Islamic Finance Rules Module, https://dfsaen.thomsonreuters.com/rulebook/islamic-finance-rules-ifr
- Central Bank of the UAE, Guidance Note on Responsible Adoption and Use of Artificial Intelligence, https://rulebook.centralbank.ae/en/rulebook/guidance-note-consumer-protection-and-responsible-adoption-and-use-artificial-intelligence
- Central Bank of the UAE, Guidelines for Financial Institutions Adopting Enabling Technologies, https://rulebook.centralbank.ae/en/rulebook/guidelines-financial-institutions-adopting-enabling-technologies
- Central Bank of the UAE, Model Management Standards, https://rulebook.centralbank.ae/en/rulebook/model-management-standards
- IFRS Foundation, IFRS 9 Financial Instruments, https://www.ifrs.org/issued-standards/list-of-standards/ifrs-9-financial-instruments/
- IFRS Foundation, IFRS 15 Revenue from Contracts with Customers, https://www.ifrs.org/issued-standards/list-of-standards/ifrs-15-revenue-from-contracts-with-customers/
- IFRS Foundation, IFRS 16 Leases, https://www.ifrs.org/issued-standards/list-of-standards/ifrs-16-leases/
- IFRS Foundation, IAS 38 Intangible Assets, https://www.ifrs.org/issued-standards/list-of-standards/ias-38-intangible-assets/
- UAE Government, Federal Decree-Law No. 32 of 2021 on Commercial Companies, https://uaelegislation.gov.ae/en/legislations/1542
- UAE Government, Federal Decree-Law No. 45 of 2021 on Personal Data Protection, https://uaelegislation.gov.ae/en/legislations/1972
- UAE Government, Federal Decree-Law No. 47 of 2022 on the Taxation of Corporations and Businesses, https://uaelegislation.gov.ae/en/legislations/1582
- Financial Action Task Force, Recommendations, https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Fatf-recommendations.html
- National Institute of Standards and Technology, AI Risk Management Framework, https://www.nist.gov/itl/ai-risk-management-framework
- National Institute of Standards and Technology, Generative AI Profile, https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence
- International Organization for Standardization, ISO/IEC 42001 Artificial Intelligence Management Systems, https://www.iso.org/standard/81230.html
