Financial services firms are moving beyond experimentation into full operational AI adoption, according to the 2025 AI Benchmarking Survey conducted by ACA Group and the National Society of Compliance Professionals (NSCP).

The survey, which collected input from hundreds of compliance leaders—including CCOs, chief legal officers, and security heads—found that 71% of firms now formally use AI, up 26 points from 2024. Notably, 11% of firms are applying AI tools for both internal and external purposes, a modest but meaningful increase from 8% last year.

“Firms have moved past the experimental phase and are now using AI to drive real outcomes,” said Aaron Pinnick, Senior Manager of Thought Leadership at ACA. “Efficiency gains are visible, but oversight still needs to catch up.”

Key Findings: AI Driving Tangible Efficiency

• Efficiency gains: 53% of compliance leaders report measurable efficiency improvements, compared with 31% last year. Areas of heaviest AI use include policy and procedure development (69%), monitoring/testing (63%), and training/communication (60%).
• Policy adoption: 70% of firms now have formal AI policies, up from 82% with some policy coverage (combined with those drafting policies), while only 6% remain without guidance, down from 18% in 2024.
• Governance gaps: 48% of firms have formal AI governance committees, but only 28% actively test or validate AI outputs, highlighting a lag in oversight.
• Cybersecurity lagging: Although 71% train employees on AI cyber risks, fewer than 30% implement technical controls such as network segmentation, access restrictions, or vulnerability testing.
• Third-party oversight: Only 24% have policies for vendor AI use, and 43% conduct enhanced due diligence on AI suppliers.

“This survey gives a clear picture of how compliance functions are evolving with AI,” said Melissa Loner, COO and incoming CEO of NSCP. “It helps identify where firms can strengthen governance, oversight, and operational adoption.”

What This Means for the Industry

The results underscore a broader trend: AI is no longer optional—it’s becoming embedded into compliance, operational, and research functions across financial services. Firms are seeing measurable efficiency gains, yet the adoption of robust governance, cybersecurity, and vendor oversight frameworks remains inconsistent.

As AI becomes more integral, leaders must balance speed with control, ensuring validation of outputs, technical safeguards, and third-party monitoring keep pace with operational deployment.

The full 2025 AI Benchmarking Survey report will be released during a webcast on November 5, with the detailed report available on ACA’s website the week of November 10.