Financial institutions are layering AI onto compliance operations that were never built to support it, and that mismatch could undermine the automation gains many are chasing. According to Duna, a structured AI readiness assessment is now essential for any firm hoping to scale automation safely across its compliance function.

The urgency is clear. Duna points to the Association of Certified Anti-Money Laundering Specialists (ACAMS) Global Threats Report 2026, which found that more than half of anti-financial-crime (AFC) teams already use AI in their compliance programmes. Yet 52% say outdated data and legacy IT systems pose a high or very high risk to those same programmes.

Duna argues that compliance is fundamentally different from areas such as customer support, coding or marketing, where generic AI can handle low-risk tasks without serious consequences. In compliance, mistakes carry financial and regulatory weight, and leaders can face personal liability and fines. The EU’s Anti-Money Laundering Authority (AMLA) has already signalled in its draft guidelines on ongoing monitoring that firms using AI must be able to explain its role, functioning and outputs so they can be reviewed and challenged.

For this reason, Duna says banks need AI that is explainable, auditable and repeatable. Teams must be able to show auditors why a case was flagged or accepted, keep a full record of what the AI was asked and what it returned, and ensure the same information under the same policy always produces the same outcome, with hard rules such as knockout criteria applied every time.

Source link