01What happens.
A regulated firm is held to what it has published, and AI restates that material to customers without anyone at the firm seeing the answer. The compliance register lists the communications the firm approved. The estate AI reads is larger than the register, and the regulator's questions begin in the gap between the two.
02Why it matters.
If you are the head of compliance, the register is the record you can defend, and the estate is the record against which you are judged.
When the regulator asks what the firm has published, the speed and completeness of the answer are examined before any of the content is. Any regulated organisation is in the same position: it has a published record, a machine restating that record to the people it serves, and a question it may be unable to answer when asked.
03The case.
This illustrative scenario draws on patterns observed across regulated firms; no firm is identified.
A retail financial services firm publishes product information on its main website, on a set of product microsites, on a partner portal, on an intermediary site and in a document store of factsheets, key information documents and terms. The compliance team approves each communication before publication and keeps a register of approvals. The register is complete for the communications it covers.
A customer asks AI whether one of the firm's products carries a particular fee and is told that it does not. The customer takes the product on that basis.
The answer comes from a factsheet published 3 years earlier, superseded when the fee was introduced, still in the document store and still linked from the intermediary site. The customer is charged the fee and complains, quoting the AI answer, which quotes the firm.
The regulator's information request follows the complaint, and it does not stop at one factsheet. It asks the firm to set out the product information it has published, where each item is, how each is controlled, and how a superseded document came to be served as current.
The register answers for the communications the firm approved. Nothing answers for the rest of the estate.
Establishing the estate takes 4 months. Two product microsites from earlier campaigns are found live, carrying terms that no longer apply. The partner portal carries a rate sheet from the previous year, and the intermediary site links to 11 documents the firm has withdrawn. Each item is the firm's own material, each is reachable, and each has been available to AI throughout with nothing on it to say it was superseded.
The compliance team had done its work on the communications it knew about, and the register showed that. What the team could not see was the estate beyond the register because; the register was the only map the firm had, and it mapped approvals rather than what was online.
04Exposure.
The firm answers to the regulator for its published record, and that record now includes what AI says the firm said. An information request that begins with one answer widens to the whole estate, and the firm's ability to demonstrate control is judged by how quickly and how completely it can account for what is online.
4 months of work, adviser fees, remediation across 5 properties and a long correspondence with the regulator follow, none of it budgeted.
What lasts is the firm's standing with its regulator. It is on record as unable to say what it had published when the body that supervises it asked, and that record is read at the next inspection.
05What AI Readiness changes.
The register was the firm's only map, and it stopped at the approvals. The outside-in reading AAAnow provides starts where the register stops: the firm's digital landscape as AI reads it, with the properties, documents and versions AI is drawing on evidenced, including those the register never held. The firm can then decide which position stands for each product, retire what no longer applies, and hold a known record of what is online before a regulator asks for one. Any compliance determination remains a matter for the firm and its advisers.
Your team makes the changes; AAAnow provides the assessment, the evidence, the guidance and the review.
06Related use cases.
A 2-year-old partner promotion put the firm in front of the regulator
An inspection that began on a partner's website.
Customers abroad received the wrong cover and the wrong number to call
A promotion page that outweighed the policy.
Investors acted on results the company had already superseded
The same published record, read on behalf of investors.
07References.
- Illustrative scenario drawn from patterns observed across AAAnow assessments of regulated firms.
Next step
Talk it through, in your terms.
The briefing sets this case in your organisation’s terms, and the discussion follows your questions.
Illustrative scenario, drawn from observed patterns. No firm is identified.