CUBE: regulatory intelligence, obligations and control workflows

CUBE supplies regulatory intelligence and compliance technology to financial institutions and other regulated businesses. For a brokerage group, the relevant workflow is identifying a regulatory development, assessing which entity or activity it affects, assigning the response and preserving evidence of the decision. The value of that process depends on the institution’s regulatory scope and internal ownership being represented accurately.[1]

Within RegPlatform, the published lifecycle moves from horizon scanning and regulatory inventory through obligation identification, mapping to controls, remediation and reporting. This allows a team to connect a rule change with the corresponding control and the evidence of its treatment. The practical unit of work is therefore more than an alert: it includes the affected business context, an accountable owner and the recorded response.[3]

The acquired Acin business contributes a network for comparing non-financial risk and control data. Its acquisition announcement describes standardised control information and comparison against anonymised peers. Such benchmarking can help identify missing or weak controls; the institution still needs to judge whether a peer comparison is appropriate for its own products, operating model and risk appetite.[22]

RegConnect is the RegPlatform integration module. Development teams can use its bidirectional API to retrieve regulatory intelligence, trigger platform functions and exchange data with GRC or internal compliance systems. Access is governed by roles and logged. CUBE describes maintaining links between regulatory content and downstream items so changes can be flagged for review. An implementation needs to decide which system owns each record and how updates, permissions and failures are handled.[7]

Intel separately advertises a REST API with a developer portal. That is a product capability to scope in the contract: a firm receiving a feed for internal compliance and a platform redistributing content to customers require different rights. The available interface should be demonstrated with the required identifiers, update history and retrieval patterns before those dependencies become part of a production workflow.[4]

Powered By is designed for embedding structured, versioned regulatory intelligence in other products, workflows and AI solutions. It addresses the content layer as well as technical delivery, with filtering by jurisdiction and relevant obligations. For a brokerage technology provider, this is the route to discuss when building a customer-facing compliance feature or incorporating regulatory content into a separate service.[6]

CUBE’s public customer-agreement index separates Intel documents, general CUBE Solutions terms and strategic-partnership documentation. Its product pages lead to a demonstration or discussion instead of publishing a numerical subscription menu. Buyers should first identify the product and contract set that matches the intended use, including any embedded-content or partner arrangement.[17][2]

The January 2026 Global Terms identify the contracting parties, purchased services, authorised-user limits and fees through the order form. Configuration and support can form part of the defined services where applicable. A useful commercial schedule should therefore describe the licensed modules, legal entities, users, integration rights and service scope, together with the term and renewal arrangements.[18]

The current linked Intel terms, June 2026 version 1.1, grant an internal regulatory and compliance-use licence. They restrict programmatic access, AI-model training and commercial provision to third parties, and do not automatically include other marketed products. Consequently, an API, embedding or model-related use needs explicit agreement; its appearance in a product description does not settle the licence entitlement.[19]

RegProfile defines the jurisdictions, issuing bodies, document types and topics relevant to the firm. It applies that profile across modules including RegBook and RegInsight, while recording changes to the configuration. This makes the initial scope exercise substantive: a new jurisdiction, product or legal entity can require an updated profile, and the version history helps explain what coverage applied when a decision was taken.[8]

RegFlow provides configurable, role-based workflows that begin with an item in RegBook or RegInsight. Tasks can be assigned with deadlines, and actions are logged with the person and time. Workflow status appears in RegDashboard, while RegAdmin governs access. Firms can use those functions to define who assesses relevance, who approves an interpretation and who accepts completion of the response.[9]

Hosting is product-specific. The current privacy exhibit lists UK enterprise datacentres and different Microsoft Azure locations for Intel, RegRoom, Oden and Hub AI. Its standard personal-data categories concern authorised personnel, professional contact details, credentials and usage data. The appropriate deployment review should therefore match the selected service, location and actual uploaded material, rather than assume that every CUBE product has an identical hosting arrangement.[21]

CUBE advertises global support available around the clock. The public enquiry route connects a prospective customer with the relevant specialist for platform evaluation, particular capabilities or regulatory-change questions. A production engagement should establish the operational contact path used by administrators and incident responders.[13][12]

The Global Terms define support through the order form, covering escalation, incident management, service reporting, review, maintenance windows and dependencies where incorporated. The support schedule is therefore the place to confirm response targets and escalation ownership for unavailable content, integration faults or workflow disruption.[18]

The Intel security exhibits provide a more specific basis for supplier review: a documented security programme, annual external assessment and access to certain assessment or testing information on request. They also address continuity and recovery planning. Their references to possible standards and audit types should be read as contractual provisions, rather than treated as a certificate covering every product.[20]

CUBE’s role is to provide regulatory information and software that supports an institution’s compliance work. Its website terms expressly distinguish public information from professional advice. Financial permissions for the institution’s brokerage activities remain a separate question from its entitlement to access CUBE content or operate a workflow.[14]

The information-privacy exhibit identifies the customer as controller and CUBE as processor for the covered personal data. The customer remains responsible for required notices, consents and processing instructions. This allocation should be matched to the data actually used by the selected product, particularly where an integration introduces information beyond basic user-account details.[21]

The website operator is CUBE Content Governance Global Limited, English company 07886383, with a registered address at Tower 42 in London. The group also publishes a list of legal entities across the UK, North America, Australia, India and Sri Lanka.[14][15]

Ben Richmond founded CUBE in 2011 and remains its published chief executive. CUBE identifies Hg as its strategic investor partner and lists acquisitions including Reg-Room, Thomson Reuters’ Regulatory Intelligence and Oden businesses, Acin, Kodex AI and 4CRisk.ai.[16]

Operator

CUBE Content Governance Global Limited and service-specific group entities

Service scope

Regulatory intelligence, obligation and control workflows, retention-rule governance and embedded regulatory content for institutions and technology partners.

Customer types

Financial institutions; Banks; Asset managers; Insurers; Regulated corporates; Technology and advisory partners

Delivery

SaaS; Hosted; API

Pricing publication

Quote only

Headquarters

London, United Kingdom

Platforms

RegPlatform; Intel; Oden; Powered By; RegConnect; RegProfile; RegFlow; RegBook; RegInsight; RegTrend; Records Management; Agentic Coworkers; Compliance Map; RegControl

Integrations

RegConnect bidirectional API for GRC and internal compliance systems; Intel REST API and developer portal; Powered By embedded regulatory content; IBM watsonx.governance Regulatory Horizon Scanning

Pricing scope

Order forms specify purchased services, authorised users, fees and applicable contract documents; no numerical catalogue tariff is provided.

Implementation

Configure jurisdiction profiles, ownership and approval workflows, then validate data interfaces and product-specific hosting arrangements.

Support

Global 24/7 support is advertised; service levels, escalation and incident processes depend on the applicable agreement.

Permissions and regulatory scope

Regulatory information and compliance software. Subscription rights and security provisions do not establish financial-service authorisation or transfer the customer’s compliance responsibilities.

Provider metadata checked 21 Oct 2026Source 24Source 22Source 11Source 1Source 7Source 21Source 9Source 18Source 13Source 26Source 4Source 19Source 23Source 16Source 15Source 5Source 3Source 6Source 2Source 8Source 10Source 14

CUBE’s agentic coworker suite divides assistance by task. Priorities ranks potentially relevant developments, Analysis answers questions with links to underlying regulatory text, Risk helps draft or improve controls and testing scripts, and Enforcements examines enforcement themes. The Risk description expressly requires human review before outputs take effect. That review point is useful when designing approval authority and evidence requirements around AI-assisted compliance work.[11]

Records Management addresses retention-rule governance within RegPlatform. It combines regulatory obligations, internal rule authoring, review and publication of schedules. Changes have a version history, proposers cannot approve their own changes, and schedules can be exported as PDF or Excel. Its documented focus is maintaining the rules and schedules that govern retention; procurement should separately identify the systems that store and dispose of the underlying business records.[10]

The February 2026 4CRisk acquisition added AI-based mapping between obligations, policies, procedures, controls and risks, together with corporate-compliance coverage such as cyber, privacy, labour and ESG. This broadens the group’s documented capability beyond a regulatory-news feed, while the subscribed product and implementation determine which functions a customer receives.[25]

In September 2026, IBM described a Regulatory Horizon Scanning capability in watsonx.governance powered by CUBE intelligence. The integration brings regulatory updates into AI-governance workflows, where teams can link developments to their use cases and record impact assessments. This is a named product integration whose scope is AI governance, distinct from assuming that every CUBE module is available inside IBM software.[26]