When a member loses a card on a Saturday evening, the phone is usually the first place they turn. If an AI voice agent answers that call, its availability is no longer just an IT matter. It becomes part of how the credit union delivers an important service, and part of what the board has to oversee.
Credit unions should assess AI voice resilience the way they assess any outsourced service: network uptime, what happens when the AI is unavailable, incident notification, testable access and documented continuity. Those map directly to Section 76J of the Credit Union Act 1997 and the Central Bank's operational resilience guidance.
Because the phone line is where members go when something is urgent. A lost card, a payment that hasn't cleared, a loan query from a member who doesn't use the app: each depends on a call being answered.
The Central Bank of Ireland's Cross-Industry Guidance on Operational Resilience applies to all regulated financial service providers, including credit unions. It sets out how firms should prepare for, respond to, recover from and learn from disruption to critical or important business services. The revised guidance, published in July 2025, also requires a documented annual operational resilience self-assessment.
An AI voice agent is also an outsourced part of a member service. Section 76J of the Credit Union Act 1997 governs that outsourcing, and the Credit Union Handbook sets out what the board should expect from the supplier.
Not yet. Irish credit unions have a transitional exemption from the Digital Operational Resilience Act until 17 January 2028, so its ICT third-party requirements don't bind them directly today.
That doesn't make DORA irrelevant. The revised Central Bank guidance encourages firms outside DORA's direct scope to adopt equivalent measures, and an AI voice contract signed now will probably still be in force in 2028. Building DORA-style incident classification, testing and exit planning in from the start avoids renegotiating later.
Seven areas cover most of the risk. The table sets out the question for each and what a good answer includes.
|
Resilience area |
Question to ask |
What a good answer includes |
|---|---|---|
|
Network availability |
What uptime did your voice network deliver over the last 12 months? |
A measured figure, not a target, with the monitoring method |
|
AI unavailability |
If the AI service is down, what happens to an incoming member call? |
A tested fallback route to staff, on the same dialled number |
|
Incident handling |
How are incidents classified, and when are we told? |
Written severity levels and a running notification clock |
|
Support response |
What are your response and resolution times by priority? |
Published SLA targets and current performance against them |
|
Testable access |
Can our auditors and the Central Bank test access to your data and premises? |
Yes, by arrangement, not only a contract clause |
|
Continuity and exit |
Do you run continuity tests with us, and what's the exit plan? |
Joint BCP and DR tests; data return and transition terms in writing |
|
Data location and records |
Where is call data stored, and is every call logged? |
EU processing and storage; every call transcribed, summarised and logged |
The second row matters most. A credit union can tolerate an AI agent that misunderstands a query, because the call can pass to a person. It can't tolerate a design in which an AI outage means nobody answers the phone.
The AI Voice Network runs at the network layer rather than inside a separate contact centre application. AI Voice Agents work on the phone system and numbers a credit union already has, so there's no platform migration and no second phone system to keep running.
DigitalWell supports more than 75 credit unions across Ireland, according to its partner Wellington IT, and carries over 100 million minutes of voice traffic on its own network. DigitalWell reports no network downtime in 2025 or 2026 to date, and is ISO 27001 certified across four consecutive years.
Cian Maher at DigitalWell describes the support levels behind that:
"Our resolved within SLA is currently 93%. [A] customer logs a priority one ticket, they expect to get a response within an hour and they expect it to be resolved within four hours." Cian Maher, DigitalWell
DigitalWell's credit union service is built around Central Bank outsourcing obligations. It includes a board-ready documentation pack (data location, security posture, SLA and KPI performance, incident logs), access auditors and the Central Bank can test, joint continuity testing alongside the credit union's BCP, a defined incident process with a running notification clock, and threat indicators shared across DigitalWell's credit union customers.
For members, every call is transcribed, summarised and logged, callers are verified before anything account-specific is discussed, and calls that need a person reach staff already verified.
Make it part of the outsourcing review the board already does, not a separate IT exercise.
In most cases, yes. If a third party provides the technology that answers and resolves member calls, treat it as outsourcing under Section 76J of the Credit Union Act 1997.
The transitional exemption ends on 17 January 2028. Until then, the Central Bank's operational resilience guidance and the Credit Union Act outsourcing provisions apply.
On DigitalWell's AI Voice Network, the call passes to a member of staff, and the member arrives already verified with a summary of the call so far.
They should. DigitalWell's AI Voice Agents tell callers at the start of the call, and callers can ask for a person at any point.
No. DigitalWell's AI Voice Agents run on the network the credit union already uses. Many credit unions start with connectivity or telephony and add AI later.
Want to check how resilient your member phone service is? Ask DigitalWell's credit union team for an AI voice resilience review, or hear the AI Voice Agent demos.