What's Happening?
The Office of the Comptroller of the Currency (OCC) has released a new supervisory framework to guide its bank examiners in evaluating the use of 'Super Intelligence' (SI), specifically generative and agentic AI, within the banking industry. Issued on
November 4, 2026, this framework is designed as a resource for examiners, not as a new regulatory regime for banks. It emphasizes integrating SI-related risks into existing risk-management frameworks, such as operational, compliance, credit, and model risk, rather than creating a separate SI risk category. The OCC's approach is technology-neutral, focusing on the risks presented by specific AI applications rather than imposing restrictions solely due to the use of new technology. The framework outlines six pillars and sixteen components for evaluation, including purpose, risk, control, oversight, resilience, and assurance, and highlights the importance of meaningful human oversight, especially for agentic AI systems that can act autonomously. It also addresses the challenges posed by third-party service providers of AI capabilities.
Why It's Important?
This framework is significant for the U.S. banking sector as it provides clarity on how regulatory bodies will assess the rapidly evolving landscape of AI in finance. By integrating AI risks into existing frameworks, the OCC aims to encourage responsible innovation while maintaining the safety and soundness of the banking system. The emphasis on proportionality means that the intensity of controls will be tailored to the bank's size, complexity, risk profile, and the potential consequences of its AI applications. This approach helps banks understand that while AI offers benefits like improved fraud detection and customer service, they remain fully responsible for compliance with existing laws and regulations, even when AI systems generate inaccurate or improper actions. The framework's attention to consumer compliance risk, particularly in customer-facing AI applications, underscores the potential for legal liability and customer harm from AI-generated misinformation regarding financial products and services.
What's Next?
The OCC views this framework as a living document, subject to regular updates as AI technology, its applications, and supervisory understanding evolve. Banks are encouraged to understand the framework and assess whether their current risk-management and compliance programs adequately address the issues identified. While not establishing new regulatory requirements, the framework signals the types of considerations OCC examiners will apply during examinations. The agency also invites stakeholder feedback, indicating a collaborative approach to refining AI governance in banking. For the consumer financial services industry, the clear message is that innovation does not supersede existing compliance obligations, and banks must ensure their AI use aligns with applicable consumer protection laws, especially for autonomous, customer-facing applications.
Beyond the Headlines
The OCC's framework reflects a broader trend in regulatory bodies attempting to balance technological advancement with risk mitigation. By not creating a separate AI regulatory regime, the OCC avoids stifling innovation with overly prescriptive rules, instead opting for a flexible, principles-based approach. This strategy acknowledges the rapid pace of AI development and the difficulty of creating static regulations for dynamic technology. The focus on 'human-in-the-loop' and 'human-on-the-loop' controls highlights the ethical and practical challenges of delegating decision-making to AI, particularly in critical financial operations. The framework implicitly recognizes that the 'black box' nature of some advanced AI models necessitates robust oversight and accountability mechanisms, ensuring that human judgment remains paramount in areas with significant financial or consumer impact. This approach could set a precedent for other sectors grappling with AI integration.
