In 2023, 12% of S&P 500 companies listed AI as a material risk in their annual filings. Today that number is 72%. That jump happened fast, under pressure to look current. Now someone is checking the answers.

The SEC's Division of Examinations listed AI as a priority in its 2026 exam guidance. It said it will "review for accuracy registrant representations regarding their AI capabilities." That is a different commitment than checking whether disclosure exists. Examiners are now asking whether what you wrote is actually true.

What changed about how the SEC looks at AI disclosures in 2026?

The SEC is not writing new AI-specific rules. It is applying the same principles-based standards it has always used — and pointing them directly at AI claims.

No new regulation is needed for this. SEC Chairman Paul Atkins has stated that existing rules already allow companies to report on material AI impacts. The old rules are sufficient. What changed is how seriously the agency is checking the answers.

Law firm Goodwin Law's December 2025 analysis of the 2026 priorities concluded that AI oversight will be "a component of virtually all examinations going forward." That language covers investment advisers, broker-dealers and public registrants. It is not limited to tech companies or large firms.

The shift is from disclosure to accountability. You had to say something about AI before. Now you have to say something accurate.

What is AI washing — and why is the SEC treating it as a problem?

AI washing means overstating your AI tools' capabilities, autonomy or proprietary nature in public filings, Form ADV brochures or investor marketing materials.

The name follows the same logic as greenwashing. You do not have to lie outright. Overstating is enough. SEC Chair Gary Gensler stated the core expectation clearly: companies must "say what they're doing and do what they're saying." That applies whether the overstatement was intentional or the result of marketing language no one fact-checked against the actual system.

Three real enforcement cases your clients should know about

The SEC has already charged and settled with multiple companies. These are not hypothetical risks.

Company What They Claimed What Was Wrong Penalty
Delphia (USA) Inc. AI analyzed client social media and banking data for investment decisions Data was collected but never used in an AI system $225,000
Global Predictions Inc. "First regulated AI financial advisor" with AI-driven forecasts Claim was false; AI capabilities were significantly overstated $175,000
Presto Automation Inc. Proprietary AI that eliminated the need for human intervention Third-party system; most orders still required human review Settled (2025)
Nate, Inc. (founder) Full AI integration disclosed to investors Only partial integration; founder misrepresented the extent Charges filed April 2025

Each case follows the same pattern. The AI existed. The company described it as doing more than it did. Examiners found the gap between description and reality. That gap was the violation.

Does vague language protect your clients?

Vague language does not protect a company. Generic phrases like "we leverage AI for efficiency" are exactly what examiners are trained to identify and flag.

Language like "we leverage AI to improve operational efficiency" does not protect a company. It can actually create a problem. The SEC's position, summarized in Paul Hastings' January 2026 client alert, is that companies should avoid language suggesting AI is "more advanced, capable, autonomous or proprietary than it is."

Vague language often overclaims by implication. If a filing says AI is driving outcomes and a human is actually doing the work, that statement may still be misleading — even if the word "AI" is never defined or quantified. The safer path is specific language that names the tool, describes what it does and says what it does not do.

That takes more work during the filing review. It also holds up when examiners ask.

Which clients and filing types face the most scrutiny?

Investment advisers and public companies face the highest immediate risk. The 2026 exam priorities address them directly.

Investment advisers and Form ADV

The SEC will examine whether investment advisers' actual AI usage matches what their Form ADV Part 2A says. Examiners will assess written policies under Rule 206(4)-7 — whether those policies address AI accuracy, confidentiality, recordkeeping and bias, and whether they are operating in practice rather than just written down.

If a client's brochure says AI analyzes market signals for portfolio decisions, that system needs to be running. If it was replaced by a different process after the last filing, the Form ADV needs to reflect that.

Public companies and Form 10-K material risk factors

The numbers tell you how much exposure there is. Research by The Conference Board and ESGAUGE found that 72% of S&P 500 companies now disclose AI as a material risk in their public filings, up from 12% in 2023.

That jump means a large number of companies added AI language to their filings quickly, under pressure to show they were current. Some of those statements will not survive a factual review. Reputational risk from AI failures is the most frequently cited concern — 38% of companies flagged it in 2025 filings, according to The Conference Board study.

Client Type Primary Filing What Examiners Check
Investment advisers Form ADV Part 2A; marketing materials Does the AI description match the tools actually used in portfolio management?
Public companies Form 10-K risk factors; MD&A Are AI capability claims specific, limited and supported by actual deployments?
Broker-dealers Compliance policies; trading system documentation Is the AI governance policy documented and actively running?

What the pattern in these enforcement cases signals

The companies charged so far were not deliberate fraudsters. They were marketing teams that overclaimed, executives who approved language they hadn't verified and compliance functions that hadn't caught up to what the product side was saying publicly. The SEC is not requiring perfection. It is requiring accuracy. Accuracy about AI is harder than it sounds when the technology changed faster than the internal review process did. The firms that get into trouble will be the ones where no one asked whether the AI statement in the filing was still true.

What should your firm add to its pre-filing review process?

The filing cycle is the right time to catch accuracy problems before they become enforcement problems.

Before a client submits a 10-K or amends a Form ADV, add an AI claims review step to the checklist.

Four steps that hold up under examiner scrutiny:

  1. Pull last year's filing. Find every sentence that uses "AI," "artificial intelligence," "machine learning" or "automation" in a capabilities or risk context.
  2. Confirm documentation exists. For each claim, ask the client to produce evidence the system is actively deployed. Not a roadmap, not a demo. A running system with usage records.
  3. Flag capability language. Phrases like "our AI decides," "our AI monitors in real time" or "AI-driven" require specific technical support. If that support does not exist, the language needs to change before filing.
  4. Replace boilerplate with specifics. "We use AI to improve efficiency" needs to name what it improves, in what process and by what measure. The SEC wants language a reasonable investor can evaluate — not marketing copy carried over from a press release.

None of this requires a technical AI audit. It requires asking clients to show their work. That is already part of what a careful advisor does at filing time. The SEC just made it more consequential.

Frequently Asked Questions

What is AI washing and why is the SEC treating it as a violation?

AI washing means overstating how advanced, autonomous or proprietary your AI tools actually are in filings or investor materials. The SEC's position is that companies must "say what they're doing and do what they're saying." Overstatement by implication counts as a violation, even without an outright lie.

Has the SEC already fined companies for false AI claims?

Yes. Delphia paid $225,000 for claiming its AI analyzed client data it never actually used. Global Predictions paid $175,000 for claiming to be the "first regulated AI financial advisor" when its capabilities were significantly overstated. Both cases were settled before 2026.

Does vague language in a filing protect a company from SEC scrutiny?

No. Generic phrases like "we leverage AI to improve operational efficiency" are exactly what examiners are trained to flag. The SEC wants language a reasonable investor can evaluate, which means naming the tool, describing what it does and stating what it does not do.

Which filing types face the most scrutiny in 2026?

Investment advisers face the highest immediate risk — examiners will verify that Form ADV Part 2A descriptions match tools actually running in portfolio management. Public companies with AI risk factors in Form 10-K filings are also under review, particularly those that added AI language quickly between 2023 and 2025.

What should a CPA firm add to its pre-filing review process?

Pull last year's filing and find every sentence using AI or automation language. Ask the client to show evidence the system is actively deployed — not a roadmap. Flag capability phrases like "our AI decides" or "AI-driven" and require technical support. Replace boilerplate with specific language naming the tool and what it does.

Sources

Fact-checked by Jim Smart
SEC AI Disclosure AI Washing Financial Reporting Compliance Annual Report