What will the SEC inspect when finance firms use ‘super intelligence’?
The US regulator’s 2027 programme puts advanced AI, deepfake-enabled attacks and automated advice under examination across more than 34,000 registrants. It signals scrutiny, not a new rule or a finding of misconduct.
The short version
- What happened
- The SEC’s Division of Examinations says its fiscal-2027 programme covers more than 34,000 registered firms and market bodies.
- Who it affects
- Customers could benefit from stronger checks on automated recommendations and impersonation risks, but an examination priority is not proof that any particular service is safe or compliant.
- What remains unproven
- Priority document, not a new rule
Keep in mind
Priority document, not a new rule
No examination outcomes or firm-level findings
Risk-based programme does not mean every registrant will face every test
Source analysis · 1 linked source. Primary analysed source date: 23 October 2026.
Keep following the evidence
Join The Impact Brief founding list for selected AI reports, their effect on people and the evidence limits. Read a sample first.
Read the full report · 3 min The evidence, methods, implications and limitations
The examination questions connect AI claims to operational controls
The US Securities and Exchange Commission has made emerging technology a named focus for its fiscal-2027 examinations. Its Division of Examinations oversees more than 34,000 registrants, including investment advisers, funds, broker-dealers, exchanges, clearing agencies, transfer agents and funding portals. The document uses the term ‘super intelligence’ for advanced systems used in investment analysis, customer management and code development.
Examiners will assess how firms prepare for AI-assisted cyberattacks, including phishing and synthetic voice or video used in social engineering. They will also review policies for monitoring AI in fraud detection, back-office work, anti-money-laundering compliance, retail-investor obligations and trading. For automated advice, the stated tests include whether claims are accurate, controls match investor disclosures and algorithms produce recommendations consistent with a customer’s profile or a fund’s stated strategy.[1]
A priority list raises the compliance stakes without rewriting the law
For advisers and financial-services workers, the practical task is to connect each deployed system to an owner, evidence for its claims, monitoring records, incident response and the legal obligation it supports. Investors may see closer review of automated recommendations and protections against impersonation, but the publication does not report examination results or promise that a particular product is safe.
The document is a risk-based work programme, not a new rule, enforcement action or finding against any firm. The assessment would change if the SEC publishes examination findings, a risk alert or an enforcement case showing how these tests are applied. Tokenization and clearing infrastructure are also priorities, but they are distinct from the AI examination questions.[1]
The distinction that matters
From AI use to an examination question
The regulator links a deployment to the control and investor obligation it can affect.
Cyber defence
Test preparation for AI-enabled attacks
Phishing, deepfake and vendor controls
Automated advice
Compare algorithms with client profiles
Suitability and disclosure checks
Firm claims
Compare representations with operations
Accuracy and control evidence
Continue the story
Read next
Continue exploring financial regulation: compare the finding and its evidence limits.
What will SEC examiners ask financial firms about AI in 2027?
The SEC's examination staff will scrutinise AI monitoring, cyber preparedness, automated advice and trading controls across more than 34,000 registrants. The priorities guide inspections; they are not a new rule or proof that a firm has failed.
Read the next reportExplore the full source and evidence record
What this means for people
- Customers could benefit from stronger checks on automated recommendations and impersonation risks, but an examination priority is not proof that any particular service is safe or compliant.
Global context
The programme directly governs US-registered firms and market bodies. Global groups serving US investors may still need to map local AI controls to SEC obligations.
What the evidence does not yet show
- Priority document, not a new rule
- No examination outcomes or firm-level findings
- Risk-based programme does not mean every registrant will face every test
What to watch next
- SEC risk alerts or examination findings
- Enforcement cases involving AI claims or automated advice
- Guidance on synthetic-media controls
- Firm disclosures describing AI governance evidence
Living evidence record
Impact record IAI-0GVQ12A
Evidence stage
Announced
Confidence
Developing
Reporting basis
Source analysis
Independent or research support
Not yet
Record status
Monitoring
Last checked
25 October 2026
Source trail
1 direct source across 1 source type.
People impact
Documented in this record.
Uncertainty
Limits and next checks are explicit.
Stages describe the evidence available—not whether a technology is good or bad. See the public method.
Single-source reporting disclosure
This record analyses one direct source. It can establish what US Securities and Exchange Commission published or reported, but it is not independent corroboration of every performance claim or predicted outcome. The confidence label will change only when broader evidence is added.
Evidence trail
Sources used for this report
Links checked 25 October 2026
Research question, topics and regions
Topics: Financial regulation · AI governance · Automated advice · Deepfakes
Regions: United States · North America · Global
This report is labelled source analysis. We summarise and analyse source material in our own words; company statements remain attributed claims until independently supported. Translated summaries preserve the meaning of the original source and link back to it. Read our editorial standards.
Reader commentary
What does this mean where you are?
Tell us what you have seen at work, in your community or in everyday life. A question is welcome too. No account is needed; we review notes before publishing them.
Explore commentary across the portal →Published reader notes
0No published reader notes yet. You can start the evidence-led discussion above.
Prefer a private correction or response? Contact the newsroom.