A $200m enforcement case in the DIFC did not start with a rogue trader or a fraud scheme. It started with a board that trusted the compliance reports it received and never asked whether they told the whole story.
According to Sherlocq, this pattern is playing out across more than 30 jurisdictions, costing the industry $300bn a year, and now landing individual directors with personal fines of up to $50,000.
Sherlocq recently discussed what it sees as the board director’s compliance blind spot and why it matters.
For two decades, board-level compliance operated on an informal principle of trust: the compliance function reports up, the board accepts the summary, and governance is considered discharged.
That era is ending. GCC regulators, including the DIFC and the DFSA, now expect “active, informed oversight” rather than passive ratification of management’s account. Fines have already been levied for failures such as providing false information or maintaining inadequate records, and enforcement actions have begun naming individual directors.
The structural problem is that boards typically receive regulatory information through a single channel, management, with no practical means of independent verification. A compliance officer may report in good faith, but a board without independent tools cannot distinguish a genuine picture from one shaped by commercial pressure.
The intelligence needed to ask sharper questions, including enforcement precedents, shifts in regulatory tone, and gaps between signed-off policy and current expectations, has traditionally sat behind expensive specialist legal advice.
Genuinely independent board oversight requires three capabilities: real-time verification of the regulatory landscape across jurisdictions, the ability to assess documents against applicable regulatory standards, and reliable sanctions intelligence spanning regimes such as OFAC, OFSI, the EU and the UAE’s own designations. Until now, accessing all three has required a specialist team, a law firm retainer, or both.
Sherlocq, which launched on 13 May 2026, is positioned as an AI-native RegTech platform built for compliance officers, lawyers, risk professionals and board-level decision makers in financial services. It covers regulatory research across more than 30 jurisdictions, including the US, UK, UAE, Singapore and Hong Kong, and offers document intelligence, gap assessments and sanctions screening across 320+ data sources in a single query.
Regulators beyond the DFSA, including the FCA and MAS, have signalled similar expectations of demonstrable, informed oversight. In this environment, “we relied on management” is increasingly read as an admission rather than a defence. The question for boards is no longer whether to take the regulatory picture on trust, but whether they have the tools to verify it themselves.
Bhaskar Dasgupta, Non-Executive Director and Strategic Advisor of Sherlocq, said, “Boards are not failing on compliance because they lack expertise. They are failing because they have no independent means of verifying the regulatory picture management presents to them.
“The information that would let a director ask sharper questions has always sat behind expensive specialist advice, or not been accessible at all. That has to change. In an environment where regulators are naming individual directors in enforcement decisions and personal fines are no longer theoretical, passive receipt of a management summary is no longer governance. It is exposure.”
Bhavin Shah, founder and CEO of Sherlocq, added, “The biggest governance failures rarely begin with fraud. They begin with a board that trusts the compliance reports it receives without independently verifying whether they reflect the full regulatory picture. Regulators across the UAE, the UK, Singapore, and other leading financial centres are making it clear that passive oversight is no longer enough.
“Sherlocq gives board directors something they have never had before: the ability to independently verify the regulatory landscape, assess documents against applicable standards, and run sanctions checks without relying solely on management or expensive external legal advice.”
Copyright © 2026 RegTech Analyst
Copyright © 2018 RegTech Analyst
