PRESS RELEASE: Four in five financial institutions using high-autonomy AI report no AI incident-management procedures, new research finds
Parker & Lawrence Research's survey of 300 senior risk and compliance professionals at financial services firms finds that 72.0% report high-autonomy AI in at least one risk and compliance domain. Among those firms, 81.0% report no AI incident management procedures in place.
LONDON, 30 September 2026 — Four in five financial institutions using high-autonomy AI in at least one risk and compliance domain report no AI incident-management procedures in place, according to new research from Parker & Lawrence Research.
The finding comes from AI in Risk & Compliance 2026, a new primary research report based on surveys of 300 financial institutions across the UK, France, the US, Australia, Singapore and the UAE, alongside a survey of 100 technology providers, expert interviews and product-focused market research.
Across the institutional sample, 216 firms, or 72%, report high-autonomy AI in at least one domain. The report defines high autonomy as AI acting with human review by exception or executing autonomously within predefined controls. Among those 216 firms, 81% report no incident-management procedures, 70.4% no pre-deployment review and approval, and 65.3% no AI inventory or use-case register.
Control coverage is limited across the full sample. 89.7% of institutions report fewer than half of the 13 assessed AI governance and control capabilities in place, with the average institution reporting only 4.
AI has nevertheless moved materially beyond isolated experimentation. Across the seven risk and compliance domains assessed, 65.6% of reported AI activity is at production stage or beyond, and 58.4% involves AI taking action rather than only providing information or recommendations.
High-deployment firms do report more policies, oversight, testing and monitoring than low-deployment firms, but the uplift does not match their greater intensity of use. And the means of AI access also correlates: firms relying solely on general employee access to foundation models report the fewest controls on average (less than 3 out of the 13 assessed).
"The question is no longer whether financial institutions will deploy AI, but whether their controls can keep pace. Our research shows that adoption is moving faster than preparedness.” — Michael Lawrence, Co-founder, Parker & Lawrence Research
The risks of diverging AI deployment and controls are clear. Increasingly, however, the commercial incentives of deeper AI deployments are too. Every institution estimates a positive realised return, although these are self-reported rather than audited profitability measures and 31.3% still cite difficulty measuring ROI. More than a quarter (27.7%) report returns above 50%. The report examines how these ROI leaders differ from firms in the 1%-10% band in their deployment, use cases, technology mix and operating models, and what may determine whether those returns endure.
The full report includes:
benchmarks for AI spend, realised ROI, deployment depth, autonomy and decision impact;
the AI Deployment Intensity and AI Control Maturity indices;
analysis of the differences between ROI leaders and laggards;
deep dives across financial crime compliance, conduct risk, compliance management, cybersecurity, technology risk, data risk and ESG;
a comparison of AI regulatory prescription and implementation maturity across six markets;
analysis of hybrid AI architectures and the changing role of agents; and
a market map of AI-enabled RegTech providers, expert perspectives and product profiles.
The full report is available from: https://fintech.global/about/ai-in-risk-compliance-report/
About Parker & Lawrence Research
Parker & Lawrence Research is a market research firm focused on AI, risk and compliance. It supports the responsible adoption of emerging technologies by delivering market intelligence that informs the decisions of senior risk and compliance professionals. The team has tracked the RegTech market since 2017, developing proprietary taxonomies, databases and methodologies. During this time, it has worked across the market, supporting global regulators with technology strategy and market intelligence, advising financial institutions on gap analysis and vendor selection, and producing thought leadership with technology vendors.
Media Contact
Michael Lawrence
Co-founder
Parker & Lawrence Research
