AI Supervision for Financial Advisors: What Regulators Expect

Existing rules already apply to AI-generated content in financial services. Here is what advisory firms need to know about supervision, recordkeeping, and marketing.

Financial advisors are adopting AI tools to draft client emails, summarize meetings, and prepare marketing content. The productivity gains are real, but so is a misconception worth correcting: many firms assume that because the rules do not mention AI by name, AI use falls into a gray area. It does not.

FINRA has reminded member firms that existing rules apply to AI-generated content and tools, including supervision and recordkeeping obligations. The technology is new. The regulatory expectations behind it are not.

Existing rules already apply

The core principle is straightforward. If a rule governs a client communication, a marketing message, or a business record, it applies regardless of whether a human or an AI tool produced the first draft. There is no exemption because software was involved.

That means the frameworks your firm already follows for supervision and recordkeeping are the same frameworks that govern your AI use. The task is to extend them to cover the new tools, not to invent something entirely different.

That framing should be reassuring rather than alarming. Your firm already knows how to supervise communications, retain records, and review marketing before it reaches a client. Extending those established habits to cover a new category of tool is a manageable update, not a rebuild of your compliance program. The goal is to bring AI inside the controls you already trust, applying the same judgment you use for every other communication that leaves your firm.

Books and records apply to AI drafts

When an AI tool drafts a client communication, that content can fall under your books-and-records obligations just as a human-written draft would. Firms sometimes overlook this because AI output feels temporary or informal, but a communication that reaches a client is a record.

Make sure your recordkeeping captures the communications your AI tools help produce, and that you can retain and retrieve them the same way you would any other client correspondence.

Name AI use in your supervision procedures

Supervision is the area where firms most often fall short. Written supervisory procedures that never mention AI leave a gap between what your firm actually does and what your procedures describe. Close it by naming AI use explicitly:

• Which AI tools are approved for which tasks, and which are off-limits.
• How AI-assisted client communications are reviewed before they go out.
• Who is responsible for supervising AI use and how that review is documented.

Procedures that reflect reality are both easier to follow and easier to defend. If you are examined, you want your written program to match what your people are actually doing.

Hold AI content to the marketing rule

Content written with AI must meet the same marketing and advertising standards as anything else your firm publishes. AI tools can produce fluent, confident text that is inaccurate, unbalanced, or promissory, exactly the kind of content the rules restrict.

Apply the same review discipline to AI-written marketing that you apply to human-written marketing. Treat the AI draft as a starting point that a qualified person reviews and approves, never as finished material that publishes itself.

Watch the broader regulatory direction

Beyond existing rules, the Securities and Exchange Commission has proposed rules addressing conflicts of interest that can arise from predictive analytics and similar technologies. Those proposals are not final, but they point to where scrutiny is heading.

The practical takeaway is to build good habits now. Extend your supervision and recordkeeping to cover AI, document your review process, and keep AI marketing under the same discipline as everything else. A managed services partner can help you align these controls with your existing compliance program.