What 'Resilient' Should Mean When a Credit Union Puts AI on the Phones

A resilient AI voice service keeps member calls flowing when any part fails: the AI, the carrier, the branch connection or the core banking link. It needs tested fallbacks to staff, uptime evidence and documentation the board can map to Central Bank guidance.

TL;DR

• Adding AI to a credit union's phones adds new failure points: the AI service, the data connections it depends on, and the handoff to staff.
• The Central Bank's Cross-Industry Guidance on Operational Resilience asks firms to set impact tolerances for critical or important services and test that they can stay within them.
• A resilient design fails safely: if the AI or a data link is down, calls go to staff or a standard queue without the member noticing a dead line.
• Ask any AI voice provider for uptime history, a failover design, joint continuity testing and an incident process with notification timelines.

What does resilience mean for AI voice in a credit union?

Operational resilience is a firm's ability to prepare for, respond to, recover from and learn from an operational disruption to the services it provides. For a credit union, member phone lines often carry the time-sensitive requests: a lost card, a payment that hasn't cleared, a loan update.

AI changes the shape of that service. Before, a call depended on the carrier, the phone system and a staff member. With AI Voice Agents, it also depends on the AI service, its connection to core banking, and the handoff back to staff when needed. Each is a point that can fail.

Resilience for AI voice therefore means one specific thing: a member who rings gets their answer or reaches a person, whichever component is having a bad day.

What does the Central Bank expect?

The Central Bank's Cross-Industry Guidance on Operational Resilience sets out 15 guidelines under three pillars: identify and prepare, respond and adapt, recover and learn. It applies to credit unions, and firms were expected to evidence how they apply it by December 2023.

Four of the guidelines bear directly on AI voice:

• Critical or important business services. The board approves the criteria and identifies which services qualify. Whether member phone service qualifies is the credit union's decision.
• Impact tolerances. Each critical or important service needs a defined maximum acceptable disruption, such as how long members can go without reaching the credit union by phone.
• Mapping, including third parties. The service map has to show every dependency, including outsourced providers such as the carrier and the AI provider.
• Scenario testing. The credit union tests whether it can stay within tolerance during a severe but plausible disruption.

DORA adds similar requirements later. Its transitional exemption for credit unions ends on 17 January 2028, so a provider that can already evidence incident handling and testing avoids a second procurement.

Where can AI on the phones fail?

AI voice has five failure points worth planning for. The table shows the member impact without a resilient design, what a resilient design does, and the evidence to ask for.

The fourth row is easy to miss. AI Voice Agents often reduce the number of staff taking calls at any one moment, so the path to a human has to work even if one branch is offline.

What uptime evidence should a credit union ask for?

Ask for the provider's track record on the network the AI runs on. A call can only be as available as the carrier and network underneath it.

DigitalWell is a fully licensed telecoms operator in Ireland, running its own soft switches, network and numbering. It carries over 100 million minutes of voice traffic and reports no network downtime in 2025 or in 2026 so far. Cian Maher, who leads DigitalWell's Intelligent Communications team, puts the record plainly:

"Our network uptime in the last year was 100%. And this year to date is still 100%." Cian Maher, Intelligent Communications, DigitalWell

Evidence from regulated, multi-site customers also helps. Alliance Medical runs 40+ diagnostic imaging locations in Ireland on DigitalWell's managed WAN and AWS cloud connectivity, and recorded 99.99% uptime in 2025. It's a healthcare customer, but the requirement is the same: every site connected, with no tolerance for interruption during opening hours.

DigitalWell is also ISO 27001 certified, four consecutive years running, as noted on its SD-WAN page.

How does network-layer AI change the resilience picture?

Network-layer AI is conversational AI that runs inside the carrier voice network rather than inside a separate application or contact centre platform. Because the AI sits where the calls already travel, the carrier and the AI service come from the same provider, which shortens the service map the board has to maintain.

DigitalWell's AI Voice Network works this way. The AI Voice Agents that answer balance enquiries, block cards and give loan updates run on the same network that carries the credit union's calls. When the AI hands off, the call is routed inside the same network to staff, with the summary attached.

That design also affects the audit trail. Every call is transcribed, summarised and logged, so a credit union reviewing an incident can see what each member asked and what happened next.

What should the supplier relationship include?

Resilience depends as much on the contract as on the technology. The Credit Unions page sets out what DigitalWell builds into its credit union supplier relationship:

• A documentation pack with corporate and data-location statements, security posture, SLA and KPI performance, and incident logs, on the cadence the Credit Union Handbook expects.
• Proven access. The credit union, its auditors and the Central Bank can test access to data and premises, beyond reading a contract clause.
• Joint continuity testing integrated with the credit union's own business continuity plan test.
• A structured incident process with classification and a working notification clock.
• Community threat sharing, so an attack detected at one credit union customer can help protect the others.

These map onto section 76J of the Credit Union Act 1997, which requires a credit union to supervise outsourced activities and be able to resume control or move them without detriment to its operation.

What questions should a credit union ask an AI voice provider?

Use these questions in procurement or in the annual outsourcing review. Each one should get a specific, documented answer.

1. What happens to a live call if the AI service fails mid-conversation? Ask to see it tested.
2. What's your network uptime for the last two years? Ask for the figure on the network your calls will use.
3. How are calls rerouted if our main branch or contact centre is offline? Get the routing plan in writing.
4. What does the AI do when core banking is unavailable? It should say so plainly and offer a transfer.
5. Who else is in the service chain? List every subcontractor, including AI model and hosting providers, for your service map.
6. Where are recordings, transcripts and AI processing located? You need this for GDPR and your outsourcing register.
7. Will you take part in our continuity test? Joint testing beats two separate exercises reconciled afterwards.
8. How quickly will you tell us about an incident? Agree the clock in the contract, so it works under Central Bank notification timelines.

The AI voice agent providers for credit unions article covers the wider provider comparison.

Frequently Asked Questions

Is member phone service a critical or important business service?

That's for each credit union's board to decide against its approved criteria. The guidance defines these as services where disruption could cause material member detriment or threaten the firm's viability. Card blocking and account access by phone are obvious candidates to assess.

Does AI make a credit union's phone service less resilient?

It adds components, so it can, if there's no fallback. With calls routing to staff when the AI or a data link fails, AI can add resilience by answering calls when branches are closed or busy.

Does DORA apply to credit unions' AI voice services now?

No. Credit unions are exempt from DORA until 17 January 2028. The Central Bank's operational resilience and outsourcing guidance, and section 76J of the Credit Union Act 1997, apply today.

What uptime figure should we expect from a voice provider?

Ask for the actual history rather than a target. DigitalWell reports no network downtime in 2025 or 2026 to date. Alliance Medical recorded 99.99% uptime on its DigitalWell network in 2025.

How should we test an AI voice service?

Include it in your scenario testing. Simulate an AI outage, a core banking outage and a branch outage, and check calls reach a person within your impact tolerance.

Who is responsible if the AI gives a wrong answer?

The credit union remains responsible for the service to its members. Limit the AI to well-defined call types, review a sample of calls, and keep the full audit trail each call produces.

Key Takeaways

• AI on the phones adds failure points: the AI service, its data links, and the handoff to staff. Each needs a planned fallback.
• The Central Bank's operational resilience guidance expects impact tolerances, full dependency mapping including third parties, and scenario testing.
• The network underneath the AI decides availability. Ask for real uptime history on the network your calls will use.
• A good supplier relationship includes documentation, audit access, joint continuity testing and an incident process with a notification clock.
• DORA applies from January 2028. Section 76J and Central Bank guidance apply now, and a provider that meets them today is ready for both.

Planning AI for your member phone lines? Talk to DigitalWell's credit union team about failover design, testing and the documentation your board will need.