Advice records, recorded orders, inducements and source of wealth for clients enriched by family businesses, property, inheritance and cash: that is the German wealth compliance agenda. AI agents can review advice records, compare recordings with orders and draft source of wealth assessments. People decide outcomes. BaFin supervises; GDPR, DORA and the EU AI Act apply.
What do wealth compliance teams in Germany spend their time on?
Advice documentation is the routine core. Every recommendation to a private client must come with a suitability statement explaining why it fits the client's goals, risk tolerance and knowledge. Telephone and electronic communications leading to orders are recorded. Compliance checks that the statement was given, that it matches what was discussed, and that the order matches the recording.
Inducements are the second strand. German firms distinguish between commission-based advice, with strict conditions and disclosure, and independent fee-based advice, where commissions must be passed on to the client. Compliance tests that the model sold to the client is the model applied.
Source of wealth is the third. Many wealthy German clients built their wealth in owner-managed businesses, received it through gifts and inheritances, or hold it in property. Cash is still used more than in many markets, so large cash deposits must be explained. Ownership structures are checked against the national register of beneficial owners.
Where can AI agents help?
- Advice record review (depth 1). The agent compares the suitability statement with the client profile, the products recommended and the transcript of the recorded conversation, and flags statements that are generic, inconsistent with the call, or issued after the order.
- Inducement testing (depth 1). For fee-based clients, the agent checks that commissions received from product providers were passed on in full and on time. For commission-based clients, it checks disclosure was given before the trade.
- Source of wealth assessment (depth 2). For a client who sold a family company, the agent reads the sale agreement, the company's filed accounts and the tax assessment provided, and drafts an assessment linking the wealth to its origin. Our playbook on reviewing source of wealth evidence with an AI agent covers each step, and what source of wealth is sets out the concept.
- Case handling (depth 2). Each flag opens a draft case in the firm's case system with the evidence attached. Our guide to connecting an AI agent to your case management system explains how to keep the agent's permissions narrow.
Provenance decides how much weight a document carries. A sale agreement certified by a notary is signed evidence: a named party answers for it. A client's spreadsheet of past income is declared. The agent should report both and say which supports each conclusion. Our answer on whether an AI agent can verify source of funds and source of wealth explains why that distinction matters.
What stays with people?
Whether a client's explanation of a large cash deposit is plausible is a judgement that needs context and, often, a conversation. The agent drafts; a named compliance officer decides whether to accept the funds, ask for more or file a suspicious activity report with the financial intelligence unit.
Findings that an adviser gave unsuitable advice, or that an inducement was mishandled, stay with people, as do client remediation and any notification to BaFin.
Where the agent reviews recorded calls of employees, involve the works council early; systems that can monitor employee performance need its agreement.
Which rules apply in Germany?
BaFin supervises banks, investment firms and asset managers, including their conduct of business, compliance function and AML/CFT duties. EU investment services rules set the requirements on suitability, records of advice, recording of communications, inducements and product governance; ESMA coordinates their application, and BaFin adds its own detailed expectations on the compliance function. AML duties follow EU law and the FATF Recommendations; the EU AML Authority (AMLA) is being established in Frankfurt.
GDPR governs client data. Article 5 principles apply to every use, and Article 35 requires an impact assessment for high-risk processing, which large-scale analysis of recorded calls may be. DORA (Regulation (EU) 2022/2554), applying from 17 January 2025, covers ICT risk, incident reporting, resilience testing and third-party risk for banks and investment firms, and reaches the agent and its supplier.
The EU AI Act (Regulation (EU) 2024/1689) entered into force on 1 August 2024. Most compliance-testing agents are not high-risk, but Article 4 requires AI literacy among staff using them, and Article 26 sets duties for deployers of high-risk systems, which apply if the agent's role widens into one of the Act's high-risk uses.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
How to start in the first 90 days
Weeks 1 to 4: begin with inducement testing on fee-based mandates. The rules are precise and the data comes from your own ledger. Name the officer who owns findings.
Weeks 5 to 8: replay advice record review on files already tested, and certify at depth 1 if it clears its floor. Agree recorded-call access with the works council in parallel.
Weeks 9 to 13: begin source of wealth drafting on new clients with business-sale wealth, with an analyst reviewing every assessment. Singapore's private banks face a different mix; see our brief on compliance agents in Singapore wealth management. The wider posture is in AI compliance agents: second line, never the last word.
Questions people ask
Can the agent check the beneficial owner register itself?
It can compare an extract obtained through your normal process with the client's declared structure. Discrepancies go to a person, who decides whether to report them.
Are recorded calls a good source for the agent?
Yes, through transcripts, for testing advice. Limit access to the calls in the sample and keep the purpose documented.
Does the agent replace the compliance officer's monitoring plan?
No. It executes parts of the plan. The compliance officer sets the plan, the risk priorities and the conclusions.