Shadow AI — personnel using AI tools the firm never approved — is already happening inside most RIAs, whether or not leadership knows it. The SEC's question in an exam won't be "did you allow it?" It will be "did you know about it, and what did you do?" A firm that can't answer has a supervision problem under Rule 206(4)-7, not a technology problem.
Most founders and CCOs believe AI adoption is a choice sitting on next quarter's agenda. Here's the reframe: your advisors made that choice for you months ago. They're drafting client emails in ChatGPT. They're summarizing meeting notes with a transcription bot. Someone in ops is pasting spreadsheet data into a chatbot to "clean it up." None of it went through compliance, because none of it felt like a compliance event. It felt like saving twenty minutes.
That's shadow AI, and it's not a hypothetical. It's the predictable result of putting genuinely useful tools one browser tab away from overworked people. And it's broader than chatbots: meeting-notes transcribers, AI "polish" features inside email clients, machine-learning capabilities quietly added to the CRM in a product update, browser extensions that summarize PDFs. Some of it your firm technically pays for — without ever having reviewed the AI features shipped inside software you approved years ago.
Shadow AI in RIA compliance is the use of unapproved, unsupervised AI tools by firm personnel for work involving firm or client information. The danger isn't that the tools exist. It's that their use is invisible to your compliance program — no inventory, no review, no records — which converts everyday convenience into unsupervised activity.
Because the Advisers Act doesn't care where the tool came from — it cares whether the activity was supervised. Rule 206(4)-7 requires written policies and procedures reasonably designed to prevent violations of the Advisers Act, implemented in practice, not just on paper. When an advisor uses an unapproved AI tool to produce client-facing work, three exposures open at once:
Client data leaves your perimeter. Nonpublic client information typed into a consumer AI tool may be stored, logged, or used to train models outside your control. That intersects Regulation S-P and its safeguarding obligations — and after the amended rule's compliance dates, your incident response obligations too.
Advice gets produced outside your review chain. If AI-assisted recommendations or client communications never pass through documented review, your supervision program has a blind spot exactly where examiners now look.
Records don't exist. Books-and-records obligations under Rule 204-2 assume the firm can produce required communications and documentation. Work done in a personal chatbot account generates records the firm doesn't hold and can't produce.
The pattern rhymes with the off-channel communications problem — years of SEC penalties driven not by the existence of texting, but by business happening where firms couldn't see or preserve it. Shadow AI is off-channel work product.
Expect artifact requests, not abstract questions. The SEC's FY2026 exam priorities state that examiners will assess advisers' policies for monitoring the use of AI technologies — monitoring, not merely permitting or prohibiting. In practice, requests in this area look like:
Notice the trap in the third item. A firm with a strict written ban and zero monitoring is arguably worse off than a firm with a permissive policy it actually enforces. The unenforced ban is documentary evidence that the firm identified a risk and then didn't supervise it.
The direct cost is exam findings and remediation. The indirect cost is worse: once examiners find one unsupervised workflow, the presumption of control is gone, and everything gets a second look. Extended exams consume the compliance calendar for months. And if client data actually leaked through a consumer AI tool, you may be in breach-notification territory — with the added embarrassment that the "vendor" was never vetted because it was never disclosed.
There's an internal cost too. Firms that respond to shadow AI with blanket bans push usage further underground and lose their best people's productivity gains. The advisors don't stop; they just stop telling you.
Treat it like the supervision problem it is — with a program, not a memo:
The last two steps are where spreadsheets quietly fail. Supervision that lives in someone's inbox produces no evidence. StratiFi's ComplianceIQ takes the opposite approach: exceptions get flagged, reviews get logged, and every supervisory action creates an audit trail automatically — so when the exam letter asks how you monitor AI use, you produce a report instead of a narrative. It's the same architecture that handles portfolio supervision, which means AI oversight doesn't become yet another disconnected tool. For the broader exam context, our breakdown of the SEC's 2026 exam priorities covers where AI sits in the current cycle.
Shadow AI is the use of AI tools — chatbots, transcription services, document summarizers — by firm personnel without firm approval, oversight, or recordkeeping. It typically involves consumer-grade tools accessed through personal accounts, invisible to the firm's compliance program.
Is it a violation for an advisor to use ChatGPT at an RIA?Not inherently. The exposure depends on what data enters the tool, whether the use is supervised, and whether required records are kept. Entering nonpublic client information into an unapproved consumer AI tool creates safeguarding and supervision risk; drafting a generic paragraph with no client data is a far smaller issue. Firm policy should draw exactly that line.
Should an RIA just ban AI tools entirely?A total ban is usually the weakest option. Bans without monitoring create documented, unenforced policies — which examiners read as supervision failures — while pushing usage underground. A defined set of approved tools plus monitoring is more defensible and more realistic.
How can a small RIA detect shadow AI use?Start with attestations and an amnesty inventory, then add periodic spot checks of client-facing work product and, where feasible, network-level visibility into AI service usage. Perfection isn't the standard; a documented, reasonable monitoring effort is.
Most firms discover their shadow AI problem during an exam. The better order is to discover it yourself — start the inventory this week.