Supervisory technology
Supervisory technology, or SupTech, is the technology regulators themselves use to supervise, monitor, and analyse the firms under their watch. It’s the regulator-side counterpart to RegTech, which describes the technology regulated firms use to meet their own compliance obligations. Central banks and financial regulators have been building SupTech capability steadily since around 2018, and it’s now a stated strategic priority for many of them.
Key takeaways
- SupTech is the technology regulators use to supervise firms; RegTech is the technology firms use to comply.
- The BIS’s Financial Stability Institute launched the Informal SupTech Network in 2018 to connect supervisors across jurisdictions.
- The Financial Stability Board’s October 2020 report documented 28 real case studies of SupTech in use.
- Common uses include automated regulatory returns, closer-to-real-time monitoring, and sector-wide analytics.
- The European Central Bank has built a dedicated SupTech Hub as part of its core supervisory strategy.
- Post-2008 reforms increased reporting volume faster than manual review could keep up, a major reason SupTech adoption accelerated.
On this page
What supervisory technology actually isSupTech vs RegTech: who’s using the toolWhat SupTech is actually used forThe technology underneath itReal examples from regulatorsWhy regulators adopted SupTech when they didThe limits and challengesWhat SupTech means for the firms being supervisedFAQsRead more
2018
Year the BIS’s Financial Stability Institute launched its Informal SupTech Network
Source: Financial Stability Board
28
Case studies of SupTech in use documented in the FSB’s October 2020 report
Source: Financial Stability Board
What supervisory technology actually is
Supervisory technology describes the tools regulators and other supervisory bodies use internally to oversee financial institutions, markets, and business operations. It covers everything from automated data collection systems to machine learning models that flag anomalies across an entire regulated population, rather than one firm at a time.
The core idea is straightforward: regulators sit on enormous amounts of data submitted by the firms they oversee, and SupTech is about actually using that data at scale, rather than relying purely on periodic manual reviews and on-site inspections.
SupTech vs RegTech: who’s using the tool
SupTech and RegTech are often mentioned together, and easy to confuse, but they describe opposite sides of the same relationship. RegTech is technology regulated firms use to meet their compliance obligations more efficiently, things like automated transaction monitoring or KYC verification tools. SupTech is technology the regulator itself uses to supervise those firms.
The two increasingly interact. A regulator’s SupTech platform might ingest data directly from a firm’s RegTech systems, which is part of why some authorities now think about the two as a connected pipeline rather than separate problems.
What SupTech is actually used for
In practice, SupTech gets used for a specific set of jobs: collecting and validating regulatory returns automatically rather than manually, monitoring firms and markets closer to real time instead of waiting for periodic reports, and running analytics across an entire sector to spot risks or patterns that wouldn’t be visible looking at any single firm in isolation.
The Financial Stability Board’s own assessment is that SupTech can improve a regulator’s oversight, surveillance and analytical capability, and generate real-time risk indicators that support more forward-looking, judgement-based supervision, rather than supervision that only reacts after a return gets filed.
The technology underneath it
The technical building blocks behind most SupTech tools are the same ones reshaping the wider financial sector: artificial intelligence and machine learning for pattern detection, natural language processing for parsing unstructured text like news reports or firm disclosures, cloud computing and APIs for handling large volumes of data efficiently, and in some cases distributed ledger technology for tracking specific asset classes.
None of these are unique to supervision. What makes them SupTech specifically is who’s using them and why: a regulator applying them to oversee a population of firms, rather than a firm applying them to run its own business or meet its own obligations.
Real examples from regulators
The Bank for International Settlements’ Financial Stability Institute launched the Informal SupTech Network in 2018, giving supervisors from different countries a standing venue to compare notes on what’s actually working. The Financial Stability Board’s own 2020 report on the subject, published 9 October 2020, documented 28 separate case studies from regulators around the world putting SupTech to work.
The European Central Bank has gone further, building a dedicated SupTech Hub and a Digitalisation Roadmap as a core part of its strategic vision for banking supervision, rather than treating SupTech as a side project sitting outside its main supervisory function.
Why regulators adopted SupTech when they did
Much of the push behind SupTech traces back to the aftermath of the 2008 financial crisis. Post-crisis reforms significantly increased the volume and granularity of data firms had to report to regulators, and manual review processes weren’t built to keep pace with that volume. SupTech emerged largely as a response to that mismatch: more data coming in than a purely human review process could realistically process well.
Canada’s Office of the Superintendent of Financial Institutions put it plainly in 2019, describing RegTech and SupTech as ways to increase the scope and efficiency of its assessments and sharpen where it focuses its interventions, while acknowledging that adopting the technology meant rethinking talent, process, and data structure alongside it.
The limits and challenges
SupTech isn’t a solved problem for regulators. The FSB’s own research found that implementation challenges persist even where there’s broad consensus on the benefits, spanning everything from data quality issues to the talent and skills needed to build and run these systems inside a public authority rather than a technology company.
There’s also a genuine tension between automation and judgement. Supervision has always relied partly on experienced human assessment of a firm’s culture and conduct, something that’s harder to fully automate than flagging a numeric anomaly in a regulatory return.
What SupTech means for the firms being supervised
For a regulated firm, SupTech mostly shows up as an expectation that regulators can see more, faster, and with less advance notice than they used to. Data submitted in a return isn’t just filed and reviewed periodically anymore; it can feed directly into a regulator’s own analytics, sometimes generating a supervisory question or intervention faster than a firm might expect based on how examinations used to work.
That raises the practical bar for data quality on the firm’s side too. A regulatory return riddled with inconsistencies is more likely to get flagged automatically now, rather than slipping past a reviewer working through returns manually.
See your AML programme the way a regulator might
Run a structured assessment of the controls and data quality regulators increasingly check automatically.
Frequently asked questions
What is supervisory technology (SupTech)?
Supervisory technology is the technology regulators and supervisory bodies use to oversee, monitor and analyse the financial institutions and markets under their watch, rather than technology regulated firms use to meet their own compliance obligations.
What’s the difference between SupTech and RegTech?
SupTech is used by the regulator to supervise firms. RegTech is used by regulated firms to meet their own compliance obligations. They’re two sides of the same relationship and increasingly interact with each other.
What is SupTech actually used for?
Common uses include automating the collection and validation of regulatory returns, monitoring firms and markets closer to real time, and running analytics across an entire regulated sector to spot risks a single-firm review wouldn’t reveal.
When did regulators start adopting SupTech?
Adoption accelerated from around 2018 onward. The BIS’s Financial Stability Institute launched its Informal SupTech Network that year, and the Financial Stability Board published a detailed report with 28 case studies in October 2020.
What technology powers most SupTech tools?
Common building blocks include artificial intelligence and machine learning, natural language processing, cloud computing and APIs, and in some cases distributed ledger technology, generally the same technologies reshaping the wider financial sector.
Why did SupTech become a priority for regulators?
Post-2008 financial crisis reforms significantly increased the volume of data firms had to report, and manual review processes struggled to keep pace, pushing regulators toward automated tools that could process that volume at scale.
What does SupTech mean for the firms being supervised?
It generally means regulators can see more, faster, with data feeding directly into a regulator’s own analytics rather than sitting in a periodic manual review, which raises the practical importance of data quality in regulatory submissions.
Read more: our ultimate guides, whitepapers and templates
Related guides and resources to help you act on what you just read.
Last reviewed July 19, 2026 · 9 min read · Written for compliance and risk professionals · By the WhoWiki editorial team
Key takeaway: Supervisory technology, or SupTech, is the technology regulators themselves use to supervise, monitor, and analyse the firms under their watch. It’s the regulator-side counterpart to RegTech, which describes the technology regulated firms use to meet their own compliance obligations. Central banks and financial regulators have been building SupTech capability steadily since around 2018, and it’s now a stated strategic priority for many of them.