AI Strategy Package
Heritage Community Credit Union
Prepared by Seiche Advisors
Engagement: Journey · August 5–16, 2026
Lead consultant: Maria Santos
Classification: Proprietary & Confidential
Table of contents
- Executive summary
- Institution profile
- Current-state assessment
- Maturity scoring
- Opportunity map
- 12-month roadmap
- Pilot specifications
- AI governance framework
- Policy recommendations
- Vendor landscape
- Budget & ROI model
- Change management
- Regulatory alignment
- Board actions requested
- Appendices
1. Executive summary
Heritage Community Credit Union ($1.8B, 42,300 members, Eugene OR) is positioned to become an AI-ready community institution within 12 months without hiring data scientists or replacing core systems. The credit union has foundational technology (Symitar, Alkami, Abrigo BAM+, M365) and executive alignment; the primary gap is governance and sequenced execution.
Key findings
- AI is already in use — fraud monitoring, digital FAQ, vendor-embedded models — but undocumented.
- Governance lags peers — no AI policy, no inventory, no designated AI governance lead until August 2026.
- BSA/AML capacity is the binding constraint — highest-ROI first investment.
- Shadow GenAI risk is real — 27% of surveyed staff reported personal AI tool use with work content.
Recommended strategy
Governance first, two governed pilots, scale on evidence.
| Phase | Timeline | Investment |
|---|---|---|
| Foundation | Q3 2026 | $35K (Journey, policy, inventory) |
| Pilot 1 — BSA/AML | Q4 2026 – Q1 2027 | $45K–$61K POC |
| Pilot 2 — Copilot | Q4 2026 | $12K |
| Scale decision | Q1 2027 board | $95K–$130K if POC succeeds |
Year 1 total (midpoint): $225K · Expected ROI: 2.5–3.5x within 18 months.
2. Institution profile
| Attribute | Detail |
|---|---|
| Legal name | Heritage Community Credit Union |
| Charter | Federal (NCUA) · Oregon DFR |
| Assets | $1.82B (June 30, 2026) |
| Members | 42,318 |
| Employees | 285 FTE · 34 part-time |
| Branches | 11 (Lane & Douglas Counties) |
| Field of membership | Community charter — 6-county Oregon footprint |
| CEO | Patricia Chen (since 2019) |
| CIO | James Wu |
| Core processor | Symitar (Jack Henry) |
| Digital banking | Alkami |
| BSA/AML | Abrigo BAM+ |
| Productivity suite | Microsoft 365 E3 |
Strategic context
HCCU competes with three regional banks and two larger credit unions in its footprint. Digital engagement scores trail top-quartile CUs by 8 points (Alkami analytics, Q1 2026). Management's 2026–2028 strategic plan cites operational efficiency and member experience — AI supports both if governed.
3. Current-state assessment
3.1 AI inventory (as of August 2026)
| System | Vendor | AI/ML capability | Documented? | Risk tier |
|---|---|---|---|---|
| Fraud monitoring | Jack Henry (Symitar) | Transaction scoring | Partial | Tier 2 |
| Digital FAQ bot | Alkami | NLP routing | No | Tier 1 |
| BSA transaction monitoring | Abrigo BAM+ | Rule-based + some ML | Partial | Tier 3 |
| Credit bureau | Equifax | Proprietary models | Vendor doc | Tier 3 |
| Marketing propensity | None | — | — | — |
| Employee GenAI | None approved | — | — | Gap |
Tier definitions: Per Seiche AI Policy Template — Tier 1 (low), Tier 2 (moderate), Tier 3 (high/regulated).
3.2 Organizational readiness
| Area | Status |
|---|---|
| AI policy | Draft in progress (Journey deliverable) |
| AI governance committee | Proposed — CRO chair, CIO, CLO, BSA, one board liaison |
| Board AI literacy | One director attended Compass session |
| Staff training | None formal; IT security training annual only |
| Vendor AI diligence | Standard TPRM; no AI-specific addendum |
3.3 Stakeholder input (Journey interviews)
| Role | Top priority | Concern |
|---|---|---|
| CEO | Competitive parity | Board optics — "don't be first, don't be last" |
| CIO | Integration complexity | Symitar API limits |
| CRO | BSA capacity | Examiner questions on AI in AML |
| CLO | Liability | Shadow AI, fair lending if lending AI later |
| BSA Officer | Alert volume | Cannot hire 2 more FTE in 2026 budget |
| CFO | ROI proof | Wants 18-month payback on any pilot >$50K |
4. Maturity scoring
Aggregate from Pre-Compass Questionnaire (8 executives, July 2026):
| Dimension | Mode | Mean | Facilitation note |
|---|---|---|---|
| Strategy | L2 | 2.1 | AI not on strategic plan yet |
| Governance | L1 | 1.4 | Focus area — no policy |
| Technology | L2 | 2.3 | Vendor-led only |
| Culture | L2 | 2.0 | Curious but untrained |
Heat map summary: Governance is the outlier low score; technology slightly ahead due to Symitar/Abrigo embedded ML.
Target by Q2 2027: Governance L3, Strategy L3, Technology L3, Culture L3.
5. Opportunity map
Prioritized by ROI × feasibility × regulatory acceptability for HCCU.
| Rank | Opportunity | Dept | ROI horizon | Feasibility | Year |
|---|---|---|---|---|---|
| 1 | BSA/AML sanctions triage | BSA | 9–14 mo | High | 2026 |
| 2 | GenAI productivity (Copilot) | Enterprise | 3–6 mo | High | 2026 |
| 3 | Deepfake / wire fraud defense | Security | Ongoing | Medium | 2026 |
| 4 | Commercial loan doc extraction | Lending | 12–18 mo | Medium | 2027 |
| 5 | Member service chatbot (authenticated) | Digital | 12–18 mo | Medium | 2027 |
| 6 | Marketing propensity | Marketing | 18+ mo | Low | 2028 |
| 7 | Auto loan decisioning AI | Lending | 24+ mo | Low | 2028+ |
Department opportunity detail
BSA/AML (Priority 1)
1,400 alerts/month; 62% analyst time on false positives. Verafin or Abrigo AI layer — see Pilot Spec #1.
Lending
Commercial packages: 4.2 hrs avg prep. Ocrolus/nCino viable after policy and fair-lending framework — Q2 2027 earliest.
Member service
12% FAQ deflection today. Authenticated AI (Access Softek IVA, interface.ai) requires policy Tier 2 review and member consent model — 2027.
Operations
Check image fraud, deposit hold automation — core-vendor roadmap; monitor Jack Henry releases.
6. 12-month roadmap
Q3 2026 — Foundation ("Get Smart, Get Safe")
| Week | Milestone | Owner |
|---|---|---|
| Aug 5–16 | Journey delivery (this package) | Seiche |
| Aug 21 | Board authorization | CEO |
| Aug 15 | AI policy draft → CLO review | CIO/CLO |
| Aug 15 | AI inventory complete | CIO |
| Aug 8 | AI governance lead named | CRO |
| Sep 1 | Interim GenAI guidelines published | CLO |
Q4 2026 — Deploy pilots
| Milestone | Owner |
|---|---|
| Copilot pilot start (15 users) | CIO |
| Verafin POC contract signed | BSA/CIO |
| Phishing-resistant MFA on wires | CIO/CISO |
| Deepfake staff training | HR/CRO |
Q1 2027 — Measure & decide
| Milestone | Owner |
|---|---|
| BSA POC results to board | BSA Officer |
| Copilot scale/stop decision | CIO |
| NCUA exam prep narrative (AI inventory) | CRO |
| Lending IDP RFP (if governance L3) | CIO |
Q2 2027 — Scale (conditional)
| Milestone | Owner |
|---|---|
| Verafin full license (if POC pass) | BSA |
| Copilot expand to 75 users (if pilot pass) | CIO |
| Board quarterly AI report — standing agenda | CEO |
Q3'26 Q4'26 Q1'27 Q2'27
[Foundation] [Pilot live] [Evaluate] [Scale?]
| | | |
Policy BSA POC Board Full BSA
Inventory Copilot decision + Copilot
7. Pilot specifications
Full specifications are standalone documents:
| Pilot | Document | Summary |
|---|---|---|
| #1 BSA/AML | 06-pilot-spec-bsa-aml.html |
90-day Verafin sanctions triage POC · $45K–$61K |
| #2 GenAI | 07-pilot-spec-genai-productivity.html |
15-user Copilot · $12K · post-policy |
Sequencing rule: Pilot #2 starts only after AI acceptable-use policy effective date.
8. AI governance framework
HCCU's full AI Center of Excellence (COE) framework — organizational model, RACI, intake workflow, KPIs, 90-day launch plan, and board reporting templates — is delivered as a standalone Journey artifact: 10-ai-coe-framework.html.
Summary (see COE framework for detail)
| Element | HCCU design |
|---|---|
| Model | Standard COE (Model B) — $1.8B assets |
| COE lead | Robert Ellis, CRO — 0.25 FTE |
| Chair | Robert Ellis, CRO |
| Cadence | Monthly through Q1 2027; quarterly steady state |
| Launch target | November 15, 2026 |
Three-tier review process
| Tier | Examples | Approval |
|---|---|---|
| Tier 1 | Internal summarization, FAQ bot tuning | Dept head + CIO |
| Tier 2 | Member-facing chat, marketing AI | Committee + CLO |
| Tier 3 | BSA, credit, fraud decisioning | Committee + Board notice |
9. Policy recommendations
HCCU should adopt the Seiche AI Acceptable Use Policy Template with these institution-specific customizations:
| Section | HCCU customization |
|---|---|
| Scope | All employees, contractors, board advisory use |
| Approved tools | M365 Copilot (post-pilot), Abrigo, Jack Henry embedded — explicit list |
| Prohibited | Autonomous credit decisions; public ChatGPT with member data |
| Data handling | Symitar Restricted data never in Tier 1 tools |
| Vendor AI | TPRM addendum — AI exhibit required on new contracts |
| Incident response | 24-hr CLO notification for AI-related data incident |
Target board ratification: September 2026 board meeting.
Policy owner: AI Governance Committee · Annual review: August each year.
10. Vendor landscape
Shortlist by use case (community CU–relevant)
BSA/AML
| Vendor | Fit for HCCU | Notes |
|---|---|---|
| Nasdaq Verafin | Primary | Agentic sanctions; strong CU references |
| Abrigo BAM+ AI | Alternative | Existing BAM+ client — lowest friction |
| Hawk AI | Evaluate | Strong explainability; integration TBD |
GenAI productivity
| Platform | Fit | Notes |
|---|---|---|
| Microsoft Copilot | Selected | Already on E3; DLP integration |
| ChatGPT Team | Backup | Strong reasoning; higher change mgmt |
Digital / member AI (2027)
| Vendor | Fit | Notes |
|---|---|---|
| interface.ai | High | CU-focused; standalone |
| Access Softek IVA | Medium | If on Access Softek digital |
| Alkami + Glia | Medium | Already on Alkami |
Full directory: Seiche AI Vendor Directory (ingested in portal).
11. Budget & ROI model
Year 1 — conservative
| Category | Low | High |
|---|---|---|
| Seiche Journey (net after credits) | $20K | $20K |
| Governance (policy, training, PMO) | $15K | $25K |
| BSA POC | $45K | $61K |
| Copilot pilot | $12K | $15K |
| Security (MFA, deepfake training) | $25K | $40K |
| Contingency (15%) | $17K | $24K |
| Total | $134K | $185K |
Board request top line: $265K includes Year 1 scale prep.
ROI model (18-month)
| Initiative | Investment | Annual benefit | Payback |
|---|---|---|---|
| BSA POC → scale | $130K | $180K analyst time + overtime avoidance | 14 mo |
| Copilot 75 users | $32K/yr | $95K productivity (0.5 FTE equiv.) | 4 mo |
| Combined | ~$225K | ~$275K/yr | ~10 mo blended |
Benefit assumptions documented in Appendix C — conservative 50% haircut on vendor case studies.
12. Change management
Messaging framework
Lead message: "AI makes your best work easier — it does not replace the Heritage relationship."
| Audience | Channel | Timing |
|---|---|---|
| All staff | CEO email + town hall | Aug 2026 |
| Pilot users | Copilot training | Oct 2026 |
| BSA team | Foster-led workflow workshops | Nov 2026 |
| Board | Quarterly AI dashboard | Standing |
Known resistance
- BSA analysts: Fear of blame for AI misses → human-in-the-loop + override culture
- Lending: Fair lending anxiety → no lending AI in Year 1
- IT: Integration burden → Seiche PMO + vendor professional services
13. Regulatory alignment
| Regulator / source | Relevance to HCCU |
|---|---|
| NCUA | Vendor management; no standalone AI rule — document under existing frameworks |
| FinCEN | Deepfake alerts; SAR procedures update required |
| FFIEC BSA/AML | Model validation for AML AI |
| SR 11-7 | Model risk principles for Tier 3 AI |
| ECOA/FHA | Future lending AI — not Year 1 |
| GAO-25-107197 (May 2025) | No imminent AI-specific banking rule — window for pilots |
Examiner narrative (draft):
"HCCU maintains an AI inventory, acceptable-use policy, and governance committee. Tier 3 AI is limited to BSA workflows with mandatory human review. POC validation documentation available on request."
14. Board actions requested
- Authorize Seiche Journey net fee ($20,000 after Compass credit)
- Approve Year 1 AI program budget up to $265,000
- Ratify AI acceptable-use policy at September 2026 meeting
- Receive quarterly AI progress reports starting Q4 2026
See Board One-Pager (04-board-one-pager.html) for vote-ready resolution language.
15. Appendices
Appendix A — Questionnaire aggregate heat map
L1 L2 L3 L4
Strategy | ●● ● |
Governance ●● | | |
Technology | ●● ● |
Culture | ●● | |
(● = executive count at level; mode governance L1)
Appendix B — AI inventory worksheet (blank template)
| Vendor | Product | AI? | Decision type | Tier | Owner | Last reviewed |
|---|---|---|---|---|---|---|
Appendix C — ROI assumption sources
| Claim | Source |
|---|---|
| 59% CU GenAI adoption | Cornerstone Advisors, "What's Going On in Banking," Jan 2026 |
| Verafin sanctions workload reduction | Verafin press release, Jul 2025 (validate in POC) |
| Copilot productivity | Ion Bank case study, 2025; Seiche benchmark |
| BSA false positive rates | HCCU internal time study, Jun 2026 |
Appendix D — Document index
| Document | Location |
|---|---|
| Compass readout (same day) | 01-compass-readout.html |
| Journey readout (same day) | 09-journey-readout.html |
| AI COE framework | 10-ai-coe-framework.html |
| Monday Morning Checklist | 02-monday-morning-checklist.html |
| Vendor scorecard | 03-vendor-scorecard.html |
| Board one-pager | 04-board-one-pager.html |
| Pilot #1 | 06-pilot-spec-bsa-aml.html |
| Pilot #2 | 07-pilot-spec-genai-productivity.html |
Package complete. ~30 pages formatted for board distribution.
© 2026 Seiche Advisors, LLC. All rights reserved. · seicheadvisors.com · Proprietary & Confidential