Can an AI agent produce board compliance reports?

The draft, yes; the opinion, no. An AI agent can assemble the management information, breaches, findings, regulatory changes and open actions for the period and write a clear first version. The head of compliance's view of the firm's position, what the board must hear and what it is asked to decide stay with that person.

What is a board compliance report for?

A board compliance report gives directors what they need to oversee compliance risk: the state of the firm against its obligations, what has gone wrong, what is changing, and where the head of compliance needs the board's support or decision. In regimes with named individual accountability, such as the UK's Senior Managers and Certification Regime, it is also how a senior manager shows the board they have raised what they should.

That makes it a different document from an operational report. An operational report describes. A board report judges and asks. The broader version of this question, for board reporting across functions, is covered in can an AI agent produce board reports?

What may the agent prepare?

The agent may:

• Compile the period's MI: breaches, complaints, monitoring results, regulatory change, training completion, open audit findings.
• Show trends over several periods and against the board's risk appetite measures.
• Summarise significant breaches and incidents, with status and remediation.
• Summarise regulatory changes that affect the firm, with owners and deadlines.
• List open actions and overdue items with owners.
• Draft the narrative sections in the board's house style, at the length the board prefers.
• Flag anything that crosses a risk appetite limit.

Much of this MI already exists in daily and weekly form; an agent that produces daily operations reports is drawing on the same sources at a finer grain.

The head of compliance decides:

• The overall opinion: whether the firm is operating within its compliance risk appetite.
• Which issues lead the report, and which are mentioned or left to committee.
• How bad news is framed and what is asked of the board.
• Whether the report should say something the data does not show, such as concern about culture in a team.
• Final approval.

Why does the opinion have to be a person's?

Three reasons. First, the opinion is what the board relies on, and directors need to be able to question the person who holds it. Second, the most important things a head of compliance tells a board often come from conversations, not data: a regulator's tone in a meeting, a sense that a business line is cutting corners. Third, accountability: if the board was not told something it should have been, a named person answers for that.

The agent's job is to make sure nothing material in the data is missed, so the person's judgement is applied to the full picture.

What does a drafted report look like?

Take a mid-sized bank. The agent drafts the quarterly compliance report. It leads with three items by severity: a breach of complaint handling deadlines in one product, rising sanctions screening backlogs, and a new regulatory requirement on payee name checks that has no project budget.

The head of compliance reorders it. She leads with the payee name checks, because it is the only item needing a board decision, a budget. She keeps the complaint breach, but adds that remediation is on track and the regulator has been told. She adds a paragraph the data could not have produced: the screening backlog stems from two experienced analysts leaving, and she wants the board to know the team is stretched. The agent's draft made sure all three items were there. Her edits made it a board paper. What a board should be asking about agents themselves is covered in what should a board ask about AI agents?

Which controls keep the report reliable?

• Every figure is sourced. Numbers link to the records behind them so the secretariat or audit can check them.
• Nothing material is dropped by the agent. Items above a severity threshold always appear in the draft; the head of compliance decides how they are presented.
• Draft and final are both kept. The record shows what the agent drafted and what the person changed.
• Agents report on agents. Where the firm uses agents, the report covers how they performed, using the board's own template; see the board paper on AI agent deployment template.

The general principle is in our guide to AI compliance agents.