SEC “AI Washing” Enforcement in 2026: What DFW Investment Advisers Must Know

Reviewed by Peter Bertran, Chief Client Officer, DKBinnovative

Artificial intelligence has moved from pilot projects to the front lines of how investment advisers market themselves and run their operations. But as AI claims have multiplied, so has regulatory scrutiny. The U.S. Securities and Exchange Commission has made “AI washing” — overstating or misrepresenting how a firm uses AI — an enforcement priority, and DFW registered investment advisers (RIAs) are not exempt. This guide explains what AI washing is, the enforcement precedents that set the tone for 2026, how to tell whether your firm is exposed, and what documentation keeps you exam-ready.

What is “AI washing,” and why is the SEC targeting it?

AI washing is the practice of exaggerating, misstating, or failing to substantiate the role of artificial intelligence in a firm’s products, services, or investment process. It borrows its name from “greenwashing,” where companies overstate environmental credentials. For investment advisers, AI washing usually shows up in marketing: claiming an “AI-driven” strategy that is largely manual, implying proprietary models the firm actually licenses from a vendor, or promising predictive capabilities the technology cannot deliver.

The SEC treats these as disclosure and marketing violations. Under the Marketing Rule (Rule 206(4)-1) and the antifraud provisions of the Investment Advisers Act, every public statement an adviser makes must be fair, balanced, and substantiated. An AI claim you cannot prove is, in the SEC’s view, a misleading claim.

What SEC AI-washing enforcement actions set the precedent?

The enforcement pattern began in March 2024, when the SEC charged two investment advisers — Delphia (USA) Inc. and Global Predictions Inc. — for making false and misleading statements about their use of AI. Both firms settled and paid civil penalties. In announcing the actions, SEC leadership warned the industry plainly: if you claim to use AI, you must be able to back it up, and you cannot promise capabilities you do not have.

That precedent has only hardened. AI adoption across advisory firms has accelerated, examiners now routinely ask about AI use during exams, and marketing claims that were once aspirational are measured against what the technology actually does. For 2026, the takeaway is simple: the bar for substantiating AI claims is higher than ever, and “everyone says it” is not a defense.

Is your firm at risk? Five signs of AI-washing exposure

• Marketing outpaces reality. Your website or pitch deck describes “AI-powered” investing, but the day-to-day process is largely manual or rules-based.
• Vendor AI presented as proprietary. You license an AI tool from a third party but imply the model is your own.
• No documentation behind the claim. You cannot produce a written record of what the AI does, who oversees it, and how outputs are validated.
• Unbounded predictive language. Marketing promises the AI will “predict” markets or “guarantee” outcomes.
• Shadow AI in operations. Employees paste client data into consumer AI tools outside any governed, documented framework.

What documentation proves your AI claims to SEC examiners?

Substantiation is the heart of AI-washing defense. Examiners want to see that every public claim maps to a documented reality. Build and maintain:

• An AI model inventory — every AI system in use, whether built or licensed, what it does, and what data it touches.
• Vendor attestations — written confirmation from AI vendors describing the technology, its limits, and how customer data is handled.
• Marketing substantiation files — for each public AI claim, the evidence that supports it, reviewed before publication.
• Human-oversight records — proof that qualified people review and validate AI outputs, especially anything touching investment decisions.
• Data-handling and security controls — how client data is protected when it flows through AI systems, aligned with SEC Regulation S-P.

How should RIAs govern AI across marketing and operations?

The firms least exposed to AI washing treat AI as a governed program, not an ad-hoc tool. That means a written AI governance policy that defines approved tools, prohibited uses, data-handling rules, review workflows for AI-related marketing, and an accountable owner. It also means closing the gap between marketing and compliance so no AI claim reaches the public without substantiation — and controlling “shadow AI,” where staff quietly route client information through ungoverned consumer tools.

Governance and security are two sides of the same coin. A documented, secure AI environment is exactly what lets you make confident, provable AI claims — and exactly what an examiner wants to see.

How DKBinnovative helps investment firms deploy secure, documented AI

DKBinnovative has supported DFW investment and professional-services firms since 2004, and secure, compliant AI is now a core part of that work. We help RIAs stand up governed AI through Hatz.AI — a secure, private AI platform built for regulated firms — so your team gets the productivity of AI inside an environment you can document and defend. Combined with our virtual CISO (vCISO) service, we deliver the model inventory, vendor oversight, human-in-the-loop controls, and Reg S-P-aligned security that turn AI from an examination risk into a substantiated advantage. Explore our approach to secure AI for investment firms and managed IT for RIAs.

Concerned your AI claims could draw SEC scrutiny? Talk with DKBinnovative about a secure, documented AI program, or call (888) 352-4832 to reach a local advisor.

Frequently Asked Questions

What is AI washing?

AI washing is overstating, misstating, or failing to substantiate how a firm uses artificial intelligence in its products, services, or investment process. For investment advisers, the SEC treats unsupported AI claims as marketing and disclosure violations under the Marketing Rule and the Investment Advisers Act’s antifraud provisions.

Can the SEC fine an RIA for exaggerating its AI use?

Yes. In March 2024 the SEC charged two advisers for false and misleading AI statements, and both settled with civil penalties. Any public AI claim an adviser cannot substantiate can expose the firm to enforcement, penalties, and remediation requirements.

How do we prove our AI claims to SEC examiners?

Maintain an AI model inventory, vendor attestations, marketing substantiation files, and human-oversight records — documentation that maps every public AI claim to what the technology actually does and who validates it.

Does using a third-party AI tool count as “our AI”?

You can use licensed AI, but you must describe it accurately. Implying that a vendor’s model is proprietary, or overstating what it does, is a common form of AI washing. Disclose the role of third-party tools truthfully and keep vendor attestations on file.

How does AI governance connect to Reg S-P?

SEC Regulation S-P requires advisers to protect customer information and maintain a written incident-response program. Because AI systems often process client data, your AI governance and your Reg S-P safeguards must work together — controlling how data flows through AI tools is both a security and a compliance requirement.