Where should a regulated firm start with AI?
Start with internal work where a licensed person already checks the output: document intake, CRM updates and staff questions. Client-facing uses come later, after your firm has a written AI acceptable use policy and a few months of logs to review.
Regulators have been clear that existing rules still apply. FINRA's Regulatory Notice 24-09 (opens in a new tab) (June 2024) reminds member firms that its rules are technology neutral and continue to apply when firms use generative AI, whether built in-house or bought from a vendor. Insurance and lending regulators publish their own guidance. Read yours with your compliance officer before any build.
An AI readiness audit is the usual first engagement. The full version runs $7,500 to $15,000 and covers where documents arrive, which systems hold client data, what your policies already allow and a ranked list of opportunities with costs and risks.
Firms without anyone senior to own AI decisions can add a fractional AI lead for $4,000 to $15,000 a month. That person sits in leadership and compliance meetings, reviews vendor proposals and keeps the AI register current. Our article on the fractional chief AI officer explains when that role pays for itself and when it does not.

