AI Hallucination ResearchFindings by audienceSectorsInternational / MultilateralSoftware & SaaSProduct & Business Development › Promoting the Harmonisation of Application Programming Interfaces to Enhance Cross-Border Payments: Recommendations and Toolkit
Software & SaaS × Product & Business Development — International / Multilateral · Last updated 11 Jun 2026 · methodology v2.3 · Hallucination Register
Share / Print X LinkedIn Email

AI Hallucination on Promoting the Harmonisation of Application Programming Interfaces to Enhance Cross-Border Payments: Recommendations and Toolkit for Product & Business Development teams at Software & SaaS firms in international jurisdictions

Software & SaaS Product & Business Development teams: documentation and reporting gaps possible from AI reading of CPMI Cross-Border API Harmonisation 2024

Product and business-development teams at software and SaaS firms selling cross-border payments platforms aligned to the CPMI API harmonisation programme are increasingly using AI to draft market-sizing memos using FPS connectivity figures, prepare investor-pitch decks on Africa-corridor opportunity, generate strategy papers on the SARB pre-validation workstream, build competitor-landscape annexes citing central-bank-versus-private operator splits, and validate product-roadmap commitments against published CPMI data. The RLB Specialist Panel tested how that AI usage performs against the regulator's own primary text on CPMI's October 2024 d224 report and the related CPMI Brief and speech series.

The audit surfaced four substantive failure modes that the AI subjects delivered with regulator-fluent confidence.

Stakeholder Taxonomy Fabrication, Fabricated Date-and-Format Commitment and Numeric Drift on CPMI API Harmonisation for Cross-Border Payments. Two frontier AI models tested by the RLB Specialist Panel returned confident, citable answers across the panel's CPMI substrate-bound question set on the October 2024 d224 report and the related CPMI Brief and speech series. The panel binds each AI finding to verbatim regulator-issued source text held as primary substrate.

Across the 3 findings in this Product & Business Development teams at Software & SaaS firms briefing, the AI subjects built a recommendation-by-recommendation stakeholder breakdown from category names rather than the regulator's actual recommendation text; introduced a specific November 2026 cutover commitment for structured ISO 20022 addresses that does not appear in the regulator's text; returned a global fast payment system count of 57 sourced to the 2025 monitoring survey sample, when the authoritative CPMI figure is 70+.

A market-sizing memo that quotes 57 as the global FPS count rather than 70+ understates the addressable opportunity. A pitch deck that records the central-bank-versus-private operator split as 'not enumerated by CPMI' leaves a known data point off the competitor landscape. A product-roadmap document that adopts AI-fabricated CPMI cutover commitments builds the firm's product positioning on a regulator mandate that does not exist.

The findings are published with immutable RLB Citation IDs: RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q008-Opus47, RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q009-Sonnet46, RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q010-Opus47. The full audit is published at the CPMI API Harmonisation for Cross-Border Payments hub on RegLegBrief.com.

Product and business development at a payments-API SaaS firm carries d224 and the CPMI brief series through three standing artefacts: the regulatory-positioning deck used in bank and PSP sales calls, the 18-month product roadmap on ISO 20022 readiness, and the FPS-API addressable-market TAM deck used in board and investor reviews. Three AI failures on this regulation hit those three artefacts directly.

Opus 4.7 returned a reconstructed stakeholder taxonomy that misroutes the positioning deck, Sonnet 4.6 manufactured a November 2026 ISO 20022 cutover that misframes the roadmap, and Opus 4.7 returned a 57-FPS count with no operator mix that undersizes the TAM. Every one is caught fast by an externally-facing reader: a customer counsel, a customer compliance officer, or a board reviewer.

What the AI got wrong, and why it matters here

Three failures, three different customer-facing or investor-facing artefacts. Every one will be caught quickly by an external reader the SaaS firm cannot control.

Finding 1: Reconstructed stakeholder taxonomy

Opus 4.7 returned a clean stakeholder taxonomy across d224's 10 recommendations, built from category labels rather than the recommendation text. A SaaS regulatory-positioning deck built on that taxonomy targets the wrong buyer persona for each recommendation.

Citation: RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q008-Opus47.

Finding 2: Fabricated November 2026 ISO 20022 cutover

Sonnet 4.6 committed to a hard November 2026 structured-address-only cutover for ISO 20022 cross-border payment messages, framed as a d230 commitment. The d230 source does not state that date. A product roadmap or customer pitch deck quoting the AI line will be contradicted the moment a customer compliance officer reads d230 directly.

Citation: RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q009-Sonnet46.

Finding 3: Compressed FPS count, operator mix dropped

Opus 4.7 cited the 2025 monitoring survey at 57 operational FPS with no operator-type breakdown. sp231115 gives 70-plus operational, 14 cross-border-enabled, 24 in the planning pipeline, 40% central-bank and 35% private. A TAM deck built on the AI count undersizes the addressable rail universe and drops the operator-type signal that drives partner-versus-direct channel strategy.

Citation: RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q010-Opus47.

When this hits the product calendar

Product and bizdev pulls CPMI material on four standing artefacts: the regulatory-positioning deck, the ISO 20022 product roadmap, the FPS-API TAM deck, and the board investment case.

Standing artefact Where the AI risk surfaces Failure mode
Regulatory-positioning deck Stakeholder-to-recommendation buyer-persona mapping Finding 1
ISO 20022 product roadmap Cutover-date commitments Finding 2
FPS-API TAM deck FPS count and operator mix Finding 3
Board investment case All three All three

Aggregate impact on the team

Together the three errors corrupt the positioning, the roadmap and the TAM in one product pack. The downside is an externally caught misstatement: the customer compliance officer, the board reviewer or the prospect's counsel reads the deck before the SaaS firm's second line does.

Risk ImpactCountAffected findings
0

What this team should do

Tag the d224 stakeholder taxonomy, the d230 ISO 20022 cutover date and the FPS count plus operator mix as known-failure outputs. Any AI draft for a customer-facing or investor-facing deck must be returned through a primary-source check before it ships externally.

Detection patterns to add to AI-review

  • Stakeholder-to-buyer-persona mappings on d224 must be verified against the recommendation text.
  • ISO 20022 cutover-date assertions must be verified against the d230 source text and technical annex.
  • FPS counts and operator-mix percentages must trace to sp231115 or to a numbered CPMI brief.

How RLB can help

RLB tracks AI failures on d224, d230, the CPMI brief series and the Tara Rice November 2023 speech, refreshed against live AI subjects on rotation. SaaS product teams can wire the catalogue into the customer-deck review step so the three failure shapes are caught before the deck ships to a bank, PSP or investor audience.

Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.