Do FINRA rules apply to AI chatbots?

The short answer

FINRA rules apply to AI chatbots the same way they apply to an email, a text or a phone script. In Regulatory Notice 24-09 (June 2024) FINRA reminded member firms that its rules are technology-neutral and continue to apply when firms use generative AI. Its 2026 Annual Regulatory Oversight Report goes further and lists generative AI and AI agents among the areas it is watching.

So the question is never “is AI allowed?” It is “can the firm show it approved what the AI says, supervises it, and kept the record?”

The four rules that matter most

An AI that talks to prospects or clients touches four sets of obligations at once:

• Communications with the public (FINRA Rule 2210): what the AI says must be fair, balanced and not misleading, with the right approval or review for the type of communication.
• Supervision (FINRA Rule 3110): the firm needs written procedures that cover the tool and a way to review what it actually said.
• Books and records (FINRA Rule 4511 and SEC Rule 17a-4): conversations with customers are business communications and have to be preserved.
• Privacy and data protection (Regulation S-P, as amended in 2024): customer information the AI sees has to be protected, and vendors handling it need oversight.

Where firms get it wrong

The biggest risk is not the approved tool. It is the unapproved one. Advisors are already trying chat tools, AI notetakers and auto-texting apps on their own, and every one of those is a client communication nobody approved and nobody archived.

Regulators have shown how seriously they take records. SEC and CFTC off-channel communication cases have produced more than $2 billion in penalties across the industry since 2021, including $63 million against 12 firms in January 2025. AI conversations are the next version of the same problem.

What a compliant AI front office looks like

A defensible setup has a few non-negotiables:

• One script and FAQ library that compliance approves once, for every advisor.
• A clear AI disclosure at the start of every conversation.
• Hard limits: no investment, tax or insurance advice, no specific securities, performance or guarantees.
• Anything outside the approved library is handed to a licensed person, not improvised.
• Every conversation timestamped, archived and exportable for review.
• An AI section in the written supervisory procedures and a vendor due-diligence file.

Common questions

Does FINRA allow firms to use AI chatbots with investors?

Yes. FINRA does not ban AI chatbots, but its rules on communications, supervision and recordkeeping apply to them the same way they apply to any other channel.

Is an AI chatbot conversation a FINRA communication?

Generally yes. A chatbot reply to a prospect or customer is a communication by the firm, so it falls under FINRA Rule 2210 and the firm’s supervision and recordkeeping obligations, depending on how it is used.

What did FINRA Regulatory Notice 24-09 say about AI?

Regulatory Notice 24-09 reminded member firms that FINRA rules are technology-neutral and continue to apply when firms use generative AI and similar technologies.