Key Takeaways
- 72% of S&P 500 companies now disclose AI as a material risk — up from 12% in 2023
- "AI washing" means overstating how advanced, autonomous or proprietary your AI use actually is
- The SEC has already fined Delphia ($225,000) and Global Predictions ($175,000) for false AI claims
- The 2026 exam priorities state AI oversight will be "a component of virtually all examinations going forward"
- CPAs advising public companies or investment advisory clients need a pre-filing AI claims review step
In 2023, 12% of S&P 500 companies listed AI as a material risk in their annual filings. Today that number is 72%. That jump happened fast, under pressure to look current. Now someone is checking the answers.
The SEC's Division of Examinations listed AI as a priority in its 2026 exam guidance. It said it will "review for accuracy registrant representations regarding their AI capabilities." That is a different commitment than checking whether disclosure exists. Examiners are now asking whether what you wrote is actually true.
What changed about how the SEC looks at AI disclosures in 2026?
The SEC is not writing new AI-specific rules. It is applying the same principles-based standards it has always used — and pointing them directly at AI claims.
No new regulation is needed for this. SEC Chairman Paul Atkins has stated that existing rules already allow companies to report on material AI impacts. The old rules are sufficient. What changed is how seriously the agency is checking the answers.
Law firm Goodwin Law's December 2025 analysis of the 2026 priorities concluded that AI oversight will be "a component of virtually all examinations going forward." That language covers investment advisers, broker-dealers and public registrants. It is not limited to tech companies or large firms.
The shift is from disclosure to accountability. You had to say something about AI before. Now you have to say something accurate.
What is AI washing — and why is the SEC treating it as a problem?
AI washing means overstating your AI tools' capabilities, autonomy or proprietary nature in public filings, Form ADV brochures or investor marketing materials.
The name follows the same logic as greenwashing. You do not have to lie outright. Overstating is enough. SEC Chair Gary Gensler stated the core expectation clearly: companies must "say what they're doing and do what they're saying." That applies whether the overstatement was intentional or the result of marketing language no one fact-checked against the actual system.
Three real enforcement cases your clients should know about
The SEC has already charged and settled with multiple companies. These are not hypothetical risks.
| Company | What They Claimed | What Was Wrong | Penalty |
|---|---|---|---|
| Delphia (USA) Inc. | AI analyzed client social media and banking data for investment decisions | Data was collected but never used in an AI system | $225,000 |
| Global Predictions Inc. | "First regulated AI financial advisor" with AI-driven forecasts | Claim was false; AI capabilities were significantly overstated | $175,000 |
| Presto Automation Inc. | Proprietary AI that eliminated the need for human intervention | Third-party system; most orders still required human review | Settled (2025) |
| Nate, Inc. (founder) | Full AI integration disclosed to investors | Only partial integration; founder misrepresented the extent | Charges filed April 2025 |
Each case follows the same pattern. The AI existed. The company described it as doing more than it did. Examiners found the gap between description and reality. That gap was the violation.
Does vague language protect your clients?
Vague language does not protect a company. Generic phrases like "we leverage AI for efficiency" are exactly what examiners are trained to identify and flag.
Language like "we leverage AI to improve operational efficiency" does not protect a company. It can actually create a problem. The SEC's position, summarized in Paul Hastings' January 2026 client alert, is that companies should avoid language suggesting AI is "more advanced, capable, autonomous or proprietary than it is."
Vague language often overclaims by implication. If a filing says AI is driving outcomes and a human is actually doing the work, that statement may still be misleading — even if the word "AI" is never defined or quantified. The safer path is specific language that names the tool, describes what it does and says what it does not do.
That takes more work during the filing review. It also holds up when examiners ask.
Nexairi Dispatch
Get the next AI move before it turns into a workflow problem.
Join the free newsletter for concise AI news, practical checklists, and the decisions practitioners need to make next.
Free. No spam. Unsubscribe anytime.
Which clients and filing types face the most scrutiny?
Investment advisers and public companies face the highest immediate risk. The 2026 exam priorities address them directly.
Investment advisers and Form ADV
The SEC will examine whether investment advisers' actual AI usage matches what their Form ADV Part 2A says. Examiners will assess written policies under Rule 206(4)-7 — whether those policies address AI accuracy, confidentiality, recordkeeping and bias, and whether they are operating in practice rather than just written down.
If a client's brochure says AI analyzes market signals for portfolio decisions, that system needs to be running. If it was replaced by a different process after the last filing, the Form ADV needs to reflect that.
Public companies and Form 10-K material risk factors
The numbers tell you how much exposure there is. Research by The Conference Board and ESGAUGE found that 72% of S&P 500 companies now disclose AI as a material risk in their public filings, up from 12% in 2023.
That jump means a large number of companies added AI language to their filings quickly, under pressure to show they were current. Some of those statements will not survive a factual review. Reputational risk from AI failures is the most frequently cited concern — 38% of companies flagged it in 2025 filings, according to The Conference Board study.
| Client Type | Primary Filing | What Examiners Check |
|---|---|---|
| Investment advisers | Form ADV Part 2A; marketing materials | Does the AI description match the tools actually used in portfolio management? |
| Public companies | Form 10-K risk factors; MD&A | Are AI capability claims specific, limited and supported by actual deployments? |
| Broker-dealers | Compliance policies; trading system documentation | Is the AI governance policy documented and actively running? |
What the pattern in these enforcement cases signals
The companies charged so far were not deliberate fraudsters. They were marketing teams that overclaimed, executives who approved language they hadn't verified and compliance functions that hadn't caught up to what the product side was saying publicly. The SEC is not requiring perfection. It is requiring accuracy. Accuracy about AI is harder than it sounds when the technology changed faster than the internal review process did. The firms that get into trouble will be the ones where no one asked whether the AI statement in the filing was still true.
What should your firm add to its pre-filing review process?
The filing cycle is the right time to catch accuracy problems before they become enforcement problems.
Before a client submits a 10-K or amends a Form ADV, add an AI claims review step to the checklist.
Four steps that hold up under examiner scrutiny:
- Pull last year's filing. Find every sentence that uses "AI," "artificial intelligence," "machine learning" or "automation" in a capabilities or risk context.
- Confirm documentation exists. For each claim, ask the client to produce evidence the system is actively deployed. Not a roadmap, not a demo. A running system with usage records.
- Flag capability language. Phrases like "our AI decides," "our AI monitors in real time" or "AI-driven" require specific technical support. If that support does not exist, the language needs to change before filing.
- Replace boilerplate with specifics. "We use AI to improve efficiency" needs to name what it improves, in what process and by what measure. The SEC wants language a reasonable investor can evaluate — not marketing copy carried over from a press release.
None of this requires a technical AI audit. It requires asking clients to show their work. That is already part of what a careful advisor does at filing time. The SEC just made it more consequential.
Sources
- The Conference Board and ESGAUGE: AI Risk Disclosures in S&P 500 Companies (October 2025)
- Winston & Strawn: SEC Targets AI Washing by Companies, Investment Advisers and Broker-Dealers
- D&O Diary: AI, the SEC, and the 2026 Reporting Season (February 5, 2026)
- Paul Hastings: Key Considerations for the 2026 Annual Reporting Season (January 8, 2026)
- Goodwin Law: 2026 SEC Exam Priorities for Registered Investment Advisers (December 2025)
- Norton Rose Fulbright: SEC Heightens Enforcement for AI-Related Disclosures
Related Articles on Nexairi
Free Assessment
Is your firm ready for AI?
A 5-minute governance check for CPA firms using ChatGPT, Copilot or AI accounting software. Get your score and your top gaps — free.
Curated insights from the NEXAIRI editorial desk, tracking the shifts shaping how we live and work.


