In the inaugural session of Theta Lake’s Financial Services AI Governance Series, industry leaders gathered to explore how regulated organizations can use AI communications and interaction governance to unblock AI-assisted productivity and drive ROI across workplace communication and collaboration environments.
The discussion featured key insights from Gary Sorrentino (Global CIO at Zoom), Irwin Lazar (President and Principal Analyst at Metrigy), and Anthony Cresci (Chief Commercial Officer at Theta Lake).
Here are the top 5 takeaways and data-backed insights shared during the session.
- Regulated Firms Are Realizing Measurable ROI and Efficiency Gains From AI
While organizations are eager to expand AI usage, the focus is shifting from simple meeting summaries to driving tangible business outcomes and operating efficiencies.
- 72% of financial services firms have achieved measurable ROI on their AI investments; higher than any other sector covered by Metrigy (Metrigy Research).
- 29% of regulated organizations report reductions in operating costs achieved through reduced staffing needs or streamlined processes (Metrigy Research).
- 39% of financial services firms realized productivity gains (Metrigy Research).
- Proactive AI Governance Accelerates AI Adoption and Drives Higher ROI
A common misconception is that strict compliance slows progress. In reality, organizations without a clear governance strategy move more slowly than their competitors and face operational limitations.
- 99% of organizations plan to expand their usage of AI (Theta Lake Survey Report).
- 88% cite governance challenges with the adoption and deployment of AI (Theta Lake Survey Report).
- Only 33% of companies currently have a full-blown AI security and governance strategy in place (Metrigy Research).
- 55% higher likelihood of positive ROI is achieved by companies that establish an AI security and governance strategy compared to those that do not (Metrigy Research).
Companies that fail to address security, compliance, and governance find themselves limited in their ability to fully leverage AI, risking falling behind competitors who proactively address these areas. When organizations lack a governance strategy, leadership defaults to blocking access. This pushes employees toward Shadow IT operating outside enterprise control.
- Human-in-the-Loop on Every Interaction Does Not Scale in the AI Era
Traditional surveillance and review methods are quickly becoming unsustainable due to the sheer velocity and volume of AI-generated content.
- As AI generates exponentially more content like meeting transcripts, generative summaries, documents, call recordings, and IVR interactions; organizations that rely on human review as their primary protective measure will find that manual inspection simply cannot keep pace.
- At the same time, new risk surfaces are emerging, including hallucinations, unverified AI outputs being passed to external clients, prompt injection attacks, and “token maxing” (where unmanaged AI usage depletes annual token budgets in months). Compounding this, communication patterns are shifting from human-to-AI and AI-to-AI interactions, generating alert volumes that purpose-built surveillance tools, not manual review, must address.
- Platform Design Must Start with the Governance Triad
Unlocking AI in regulated environments requires seamless alignment between communication platforms, specialized governance providers, and enterprise security needs.
- Designing Backwards: When designing platform features, security, retention, encryption, and surveillance need to be considered from the ground up so regulated organizations have the necessary controls in place to deploy them.
- Tri-Party Partnership: Successful rollout relies on co-innovation between the platform (e.g., Zoom), the governance engine (e.g., Zoom Compliance Manager Powered by Theta Lake), and the enterprise customer.
- Dynamic Context Tracking: Governance tools must track metadata changes in real time, including in-meeting name edits or participant parameter adjustments to maintain complete regulatory audit trails.
- Preparing for the Shift to Autonomous “Agentic AI”
The next phase of workplace AI involves autonomous digital agents taking action on behalf of human workers, changing how compliance, liability, and management operate.
- As agentic AI matures, employees, clients, and managers alike will deploy digital twins and autonomous agents to handle scheduling, workflow routing, CRM cleanup, and other mundane tasks, running 24/7 alongside human teams.
- As customer-facing AI agents interact directly with client-side AI tools, new governance questions emerge, such as determining liability and capture requirements if a customer’s external AI agent makes an error during an interaction.
Organizations do not have to choose between AI innovation and complete security. By implementing a proactive governance strategy and working with platforms that have compliance and risk controls built in, regulated institutions can unblock deployment, mitigate risks, and realize higher value from their AI investments.
Watch the full session on-demand to gain more insights.
Copyright © 2026 RegTech Analyst
Copyright © 2026 RegTech Analyst
