Key points
- % of enterprises actively deploy AI, but only 26% have governance keeping pace.
- Just 30% report comprehensive capabilities to detect unauthorized AI use.
- Smarsh EDGE 2026 discussions highlighted the need to capture complex AI-generated communications.
Financial institutions are integrating artificial intelligence into operations at a rate that exceeds the development of necessary oversight mechanisms. This disparity between technological adoption and compliance readiness raises significant questions regarding regulatory accountability and risk management within the sector.
What happened
Smarsh’s “2026 Enterprise AI Trends Study” quantifies the growing disconnect between AI implementation and governance. The research indicates that 55% of enterprises are actively deploying AI technologies, yet only 26% state their governance frameworks are keeping pace with this expansion. Furthermore, just 30% of organizations report having comprehensive capabilities to detect and manage unauthorized AI use. These statistics provided the context for discussions at Smarsh EDGE 2026, held at the Rainbow Room in New York City.
The event featured executive perspectives on modernising communications compliance and applying AI to risk detection. Smarsh Chief Executive Officer Kim Crawford Goodman discussed the complications arising from the proliferation of communications channels. She noted that AI-powered applications and autonomous agents generate new forms of enterprise communications that require careful oversight. According to Crawford Goodman, these interactions must be captured in a rich format available for intelligent analysis.
Why it matters
The spread of employee communications across messaging platforms, collaboration tools and AI applications increases pressure on organisations to identify potential misconduct. Investigators face mounting challenges in monitoring these diverse channels without overwhelming their resources or compromising regulatory accountability. The gap between deployment speed and control establishment creates measurable risks for financial institutions.
Organisations are shifting their approach to communications data beyond simple regulatory record-keeping. They are beginning to consider how archived interactions can support investigations, operational decisions and broader business intelligence. Crawford Goodman emphasised that capturing data allows companies to look for opportunities as well as risks. This dual focus requires robust systems to handle increasingly complex data while maintaining visibility.
What happens next
TheCUBE’s post-event coverage of Smarsh EDGE 2026 will air on 15 October. This broadcast will feature further executive perspectives on establishing governance across connected enterprise systems. Financial institutions will likely continue to refine their strategies for applying AI to risk detection. The industry faces ongoing pressure to align AI adoption with compliance controls to ensure regulatory accountability.
What to do and how to stay safe: Smarsh
- Audit current AI deployments to identify which tools lack corresponding governance frameworks.
- Review detection capabilities to ensure comprehensive monitoring of unauthorized AI use.
- Ensure all AI-generated communications are captured in formats suitable for compliance analysis.
- Develop strategies to balance operational intelligence opportunities with regulatory risk detection.
Step-by-step guide: Shadow AI usage: how to control unmanaged model access in your firm
General security guidance from the AppSec Scoop newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What percentage of enterprises have governance frameworks keeping pace with AI deployment?
According to Smarsh’s study, only 26% of enterprises say their governance frameworks are keeping pace with AI deployment.
How many organizations can detect unauthorized AI use?
Just 30% of organizations report having comprehensive capabilities to detect and manage unauthorized AI use.
When will TheCUBE’s coverage of Smarsh EDGE 2026 air?
TheCUBE’s post-event coverage will air on 15 October, featuring executive perspectives on communications compliance.
