The first step is to speak directly with your compliance department. AI policies, approval processes and acceptable-use guidelines will vary by firm, so advisors should not assume there is a one-size-fits-all answer.
Firms should work with their own compliance teams and, where appropriate, speak directly with their AI vendors to understand how the tools handle data, security, retention, oversight and auditability.
That said, there are several practical guardrails many teams are beginning to build into their AI processes.
1. Involve compliance early
Compliance should be part of the process from the beginning, not brought in after workflows are already built. Advisors should clarify:
- Which AI tools are approved for use
- What types of data can and cannot be entered
- Which outputs require review
- How records should be retained
- Whether AI-generated content should be treated like other drafted communications or materials
This helps the firm innovate while staying within its own compliance framework.
2. Build checks and balances into the workflow
AI-enabled workflows should include a clear process for review and validation.
For example, if a tool is being used to support financial planning-related analysis or client-facing output, the firm may want the tool to explain the logic it used. That explanation can then be captured in a log or retained as part of the process, so the team can review why an output was created, how it was created and whether the reasoning is sound.
More teams are beginning to think this way: not just asking AI for an answer, but asking it to explain the steps behind the answer so those steps can be reviewed.
3. Use AI to evaluate its own work — but do not stop there
AI can be useful for reviewing, scoring or checking its own output. For example, teams can ask the tool to identify potential issues, inconsistencies, missing context or areas that require human review.
However, AI evaluation should not replace human oversight.
AI is a tool that can be used across the business, but the human remains accountable. Advisors and their teams need to remain the final reviewers, especially when the output may influence client communications, planning assumptions or business decisions.
4. Keep a human in the loop
The most important guardrail is human accountability. AI can draft, summarize, analyze and recommend, but it should not operate without oversight in areas that require professional judgment.
A strong AI process should make clear:
- Who reviews the output
- What standard the output is reviewed against
- What happens when the AI output is incomplete, inaccurate or inappropriate
- How the final decision or communication is approved
Insight for advisors: Start with your compliance department and vendor. Then build AI workflows that include documented logic, review steps, output logs and human accountability. AI can support the process, but the advisor and firm remain responsible for how it is used.