SiteGPT · Financial Services
Make AI your customer service agent, without the guesswork
SiteGPT answers from the policy documents and product pages you approve. It can link the web pages an answer drew on, and it routes anything binding to a person. It explains your products and sends requests for personal advice to your licensed staff.
- Grounded in your content
- Explains products, routes advice requests
- Human handoff for regulated cases
- SOC 2 Type II and GDPR
SOC 2 Type II examination completed with zero exceptions noted. GDPR certified. Conversations are never used to train AI models.
Support Assistant- Account and loan requirements
- What a policy covers
- Fees, applications, and next steps
Powered bySiteGPT
A finance chatbot has two jobs to get right. It must not invent a rate or a term, and it must not give personal investment advice. In the US, anyone paid to give investment advice generally has to register with the SEC or a state regulator, as the SEC explains on Investor.gov. A support bot is not registered, so it explains products and hands advice requests to a person.
Why it matters
What goes wrong with a generic chatbot in finance?
Customers need loans, insurance, and investment products explained before they apply. A generic chatbot can invent a rate or a term while doing that. Grounding the bot in your own documents prevents it.
A generic GPT bot
- Answers from a frozen memory of the internet it cannot check
- Fills a knowledge gap with the most likely-sounding text
- Can invent a rate, a term, or a commitment you never made
- No source to point a compliance reviewer at
With SiteGPT
- Retrieves from your approved documents, then answers from those
- Declines and routes when your content does not cover it
- Explains products and fees without advising the customer
- Can show links to the web pages behind an answer, so it can be checked
How it works
How do you set up a finance chatbot safely?
Ground it in your documents
Train the bot on your product pages, policy documents, and FAQs. It answers from those, not from a model's open-internet memory.
Set the rules and route list
One owner-set instruction keeps the bot on education, and a route list sends eligibility, disputes, and advice requests to a person.
Answer, link, escalate
The bot answers from your content and can link the web pages it drew on. It declines when content is thin and hands binding conversations to a human with the transcript.
Grounding
How does the chatbot avoid wrong answers?
- How the retrieve, ground, generate loop works is in what RAG is.
- Source links for answers drawn from web pages, and a decline when content is thin
- The four controls that catch the residual risk are in how to stop a chatbot hallucinating.
Educate, not advise
Can an AI chatbot give financial advice?
- An owner-set instruction keeps every answer on education
- A route rule sends any request for advice to a licensed person
- Product questions get answered. Advice questions escalate.
The educate-versus-advise test
“What does term life insurance cover?”
Education → the bot answers
“Should I buy term or whole life?”
Advice → routed to a person
Human handoff
Which conversations go to a person?
- Escalation is on demand, with the full transcript, on every plan
- Lead qualification: the bot informs and collects, a human decides
- How platforms differ on handoff is compared in the best AI chatbots with human handoff.
Does SiteGPT sign a DPA?
Yes. A DPA is executed for Enterprise customers at onboarding. Your data is encrypted, access-controlled, and never used to train AI models. There is no EU residency. Transfers rely on SCCs with Article 27 representatives.
The subprocessor list and the DPA are on the compliance hub. To check what the DPA should contain, use what to look for in a chatbot DPA. For how GDPR applies to a website chatbot in general, see GDPR and your website chatbot.
FAQ
Frequently asked questions
How does the chatbot avoid giving wrong financial answers?
It answers only from the content you approve, using retrieval-augmented generation (RAG). It retrieves the relevant passage from your policy documents and writes the answer from that passage. When your content does not cover a question, the bot is instructed to say so and route to a person. Grounding reduces wrong answers, but it is not a compliance control on its own.
Can it give financial or investment advice?
No, and it should not be set up to. The bot explains your published policies, products, and processes: how a loan application works, what a policy covers, what a fee is. It does not tell a specific person what to buy or how to invest. Personalized investment advice is a regulated activity (in the US, advisers generally must register with the SEC or a state regulator). The bot stays on education and routes any request for advice to a licensed person.
What happens with a regulated or high-stakes conversation?
It goes to a human. The bot hands off anything binding or irreversible with the full transcript. That includes eligibility decisions, complaints, disputes, and requests for advice specific to someone's situation. Escalation starts when the visitor asks for a person, and it works on every plan.
Is SiteGPT secure enough for a financial services review?
SiteGPT has completed a SOC 2 Type II examination covering the security, availability, and confidentiality trust service criteria, with zero exceptions noted, and the report is available to Enterprise customers through the trust portal. Data is encrypted in transit and at rest, and customer conversations are never used to train AI models. SiteGPT is also GDPR certified by DPLMC International.
Where is data stored, and is there EU residency?
There is no EU data residency option and none is planned. Subprocessors are primarily in the United States, with Cloudflare operating globally. Transfers of EU, EEA, and UK personal data rely on the European Commission's Standard Contractual Clauses, and SiteGPT has appointed Article 27 representatives in both the EU and the UK. A DPA can be generated and is executed for Enterprise customers at onboarding.
Can it help qualify loan or insurance leads?
Yes. The bot can answer product questions, walk a visitor through what an application needs, and capture the details your team asks for, then hand a qualified inquiry to a person. It informs and collects, and a human makes the decision. Lead records persist until you delete them.
If your risk team asks for EU-hosted data, read does your chatbot need EU data residency. It covers when residency is a legal requirement and how SCCs apply to a US-hosted vendor.
Sources
- Investor.gov (SEC), Investment Advisers: advisers generally must register with the SEC or state securities authorities.
- GDPR Article 46: standard contractual clauses as a safeguard for transfers outside the EU.
- SiteGPT trust portal: the SOC 2 Type II report for Enterprise customers.
Test it on your own policy documents
The bot is only as accurate as the content behind it. Start by training it on your real product and policy pages, then test the questions your team gets most.
- SOC 2 Type II
- GDPR certified
- No training on your data