AI governance for Australian fund managers: CPS 230, your LPs and what to have in place.
Important takeaways.
- CPS 230 binds APRA-regulated entities. Most credit funds hold an AFSL and are regulated by ASIC, so the standard does not apply to them directly.
- A fund manager can still be relevant to an APRA-regulated investor's CPS 230 obligations. Investment management is presumptively material for an RSE licensee, but an arm's-length investment or intermediation arrangement is not captured automatically; the facts and reliance matter.
- The transition closed on 1 July 2026. Pre-existing service provider contracts had until the earlier of renewal or that date, so diligence now arrives against the full standard.
- An AI vendor is not automatically a material service provider. Assess whether the manager or vendor supports a critical operation, whether the AI is a fourth party relied upon to deliver it, and whether disruption creates material operational risk.
- ASIC's governance findings matter directly to licensees: identify AI use, perform ongoing third-party due diligence and manage it under existing obligations rather than waiting for an AI-specific rule.
- The artefacts an LP asks for are ordinary: a register of AI systems and the data they touch, the vendor's written data position, named human ownership of each output, an incident path, and an exit plan.
CPS 230 does not bind most Australian credit fund managers directly. It binds APRA-regulated entities, including registrable superannuation entity licensees. A fund manager can still enter an investor's CPS 230 perimeter when the investor relies on it for a critical operation or the arrangement introduces material operational risk.
That distinction matters. A separate account mandate and an arm's-length investment in a pooled fund do not necessarily produce the same answer. Nor does the presence of an AI tool automatically make its vendor a material service provider. The analysis follows the service, the reliance and the contract.
Who CPS 230 binds, and when a manager is relevant.
CPS 230 Operational Risk Management applies to APRA-regulated banks, insurers and RSE licensees. A fund manager operating under an AFSL is generally regulated by ASIC rather than APRA, so CPS 230 does not usually apply to the manager as its own prudential standard.
The connection is the APRA entity's obligation to manage risks arising from material service providers. For an RSE licensee, investment management is a service APRA presumes to be material unless the licensee can justify otherwise. The investor must maintain a register of material service providers, manage the associated risks and put required contractual provisions around material arrangements.
That does not mean every superannuation investment automatically makes the underlying manager a material service provider. APRA's CPG 230 practice guide distinguishes ordinary arm's-length transactions and intermediation from arrangements on which the APRA entity relies to undertake a critical operation. A mandate under which a manager performs investment management for an RSE licensee is a strong candidate. A pooled-fund investment requires analysis of the facts, the services performed and the contractual relationship.
What the transition date changed.
The original CPS 230 came into force on 1 July 2025. For pre-existing contractual arrangements with material service providers, the requirements applied from the earlier of the next renewal date or 1 July 2026. APRA's updated version of CPS 230 also commenced on 1 July 2026. The contractual transition has therefore closed and the current standard is in force.
The practical result is that APRA-regulated investors should now be assessing relevant arrangements against the full standard. A manager may encounter requests about audit and access rights, incident notification, business continuity, subcontractors, data handling and exit planning. The exact provisions should follow the investor's classification of the arrangement and the contract, not a generic claim that every LP relationship carries the same flow-down terms.
How an AI system enters the perimeter.
An AI vendor is not automatically a material service provider merely because its output touches credit work. Start with the APRA-regulated entity's critical operation and map the chain of reliance.
- The manager may be the material service provider. If the investor relies on the manager for investment management, the manager's AI stack can be part of the way that material service is delivered.
- The AI vendor may be a fourth party. Where the manager depends on an AI provider to deliver the service, the investor may need visibility of that dependency and its risks even if it has no direct contract with the AI company.
- The use case changes the assessment. An optional drafting assistant has a different impact from a system relied upon for covenant monitoring, valuation inputs or investor reporting. The questions are what happens on disruption, whether people can perform the work another way and whether failure creates material operational risk.
Classify the arrangement by function and dependency, not by the vendor's name or the label "AI". Record the reasoning either way. A documented decision that a use case is not material is more defensible than an inventory with no classification logic.
What ASIC expects directly.
CPS 230 is only one part of the governance picture. ASIC's 2024 review of AI adoption by financial-services and credit licensees warned of a potential governance gap as AI use accelerates. ASIC said licensees should apply existing obligations rather than wait for AI-specific laws, and called for proper, ongoing due diligence on third-party AI suppliers.
For an AFS licensee, this is the direct reason to know which AI systems are in use and how their risks are controlled. A manager should not wait for an APRA-regulated investor to ask before assigning responsibility or reviewing a provider's data and operating terms.
What to have ready before an investor asks.
The useful preparation is a small set of current, inspectable artefacts.
- An AI system register. Record the use case, workflow, data touched, provider, internal owner, users, materiality assessment and review date.
- The provider position in writing. Capture data use and model-training terms, processing and storage locations, retention, security responsibilities, subprocessors or model providers, termination and data return or deletion.
- Named human accountability. Identify the person responsible for each AI-assisted output and the review required before that output enters a decision, valuation, covenant test or investor report.
- An incident path aligned to contracts. Define what constitutes an incident, who is told, how quickly it is escalated and how the manager will meet any notification commitment made to an investor.
- Continuity and exit arrangements. State how the work continues if the provider, model or integration becomes unavailable, and how the fund retrieves its data and records.
The defensible position is not that the AI system cannot fail. It is that the manager knows where it is used, what the service depends on, who owns the result and how the fund responds when the system is unavailable or wrong. Running AI through a controlled operating layer can make those answers consistent, but the architecture does not replace the legal and contractual analysis.
Primary sources: APRA CPS 230, APRA CPG 230 and ASIC's AI governance findings. This guide is general information, not legal advice. The classification of a manager, provider or arrangement depends on its facts and governing documents.
Questions this guide answers.
Does CPS 230 apply to a private credit fund?
Usually not directly. CPS 230 binds APRA-regulated entities: banks, insurers and RSE licensees. A fund manager can nevertheless be part of an APRA-regulated investor's CPS 230 assessment where the investor relies on it for a critical operation or the arrangement introduces material operational risk. Investment management is presumptively material for an RSE licensee, but a pooled or arm's-length investment is not automatically captured; the facts and contract determine the position.
When did CPS 230 take effect?
The original CPS 230 came into force on 1 July 2025. Pre-existing service provider contracts had a transition until the earlier of renewal or 1 July 2026. APRA's updated version of the standard also commenced on 1 July 2026. The contractual transition has therefore closed and the current standard is in force.
Is an AI vendor a material service provider?
Not automatically. The APRA-regulated entity must assess whether the provider supports a critical operation or exposes it to material operational risk. An AI vendor may instead be a fourth party used by a fund manager. The relevant questions are what the AI does, how much the service relies on it, what happens on disruption and what the governing contract requires.
What should a fund have ready before an LP asks about AI?
At minimum: a register of AI systems in use and what data each one touches, the vendor's data handling and training position in writing, named human ownership of each AI-assisted output, an incident and escalation path, and a description of what happens if the vendor becomes unavailable.
Working with Levercon.
Levercon builds the AI operating system for credit funds: Fund OS connects a fund's own data into a knowledge layer, and Custom Agents run repetitive work across origination and monitoring. To talk to us, email info@levercon.ai.
This guide is general information, not advice. Factual claims that rely on public sources link to those sources in the text. Practical guidance also draws on patterns Levercon observes across Australian credit funds. No client is named and no figure is attributed to one. Written by Levercon, reviewed before publication and revised in place as the facts change.