Financial institutions have pushed AI deep into their compliance operations, but most still could not convince a regulator that the technology is properly governed.
That is a central finding of the Cost of Compliance Report 2026 from RegTech firm CUBE, which shows a widening gap between how fast firms adopt AI and how well they can evidence oversight of it.
According to CUBE, 59% of respondents say AI is now embedded or advanced in their core compliance processes. Yet only 34% are confident they could demonstrate AI governance to a regulator today. For an industry where accountability is increasingly personal, that shortfall carries real consequences.
The report, now in its sixteenth year, draws on the views of more than 2,000 manager-level and above professionals across finance and banking, insurance and professional services. Interviews were carried out by a third party in June and July 2026, covering 11 countries across North America, Europe, Asia-Pacific and Australia.
CUBE frames the findings as a benchmark for AI governance, examining how firms approach AI maturity, accountability and regulator readiness. The research suggests that while the pace of adoption is paying off in places, governance frameworks, control infrastructure and supporting evidence have not kept up.
Regulatory change management is another pressure point. CUBE’s research shows that implementation timelines have shortened, and confidence in the effectiveness of change programmes has shifted as a result. Firms are being asked to absorb new rules faster, raising questions about how deeply that change is truly embedded.
On costs, CUBE identifies technology investment, AI governance and regulatory complexity as the leading drivers of compliance spending, with the report breaking these down by region and sector.
Personal accountability regimes are also reshaping priorities. CUBE notes that senior manager liability is increasing demand for real-time compliance data and the evidence behind it, as executives seek to protect themselves as well as their firms.
The report further explores regulatory divergence, as the US, EU, UK and Asia-Pacific pursue increasingly independent agendas. For multinational firms, this fragmentation adds complexity and cost to an already stretched compliance function.
To help firms respond, CUBE sets out a phased action plan aimed at chief compliance, risk, legal and transformation officers. It covers immediate priorities, medium-term initiatives and future-state preparation, alongside recommended board-level metrics.
The message from CUBE is clear: deploying AI is no longer the hard part. Proving it is controlled, accountable and auditable is now the test that boards and regulators will apply.
For more, read the full report here.
Copyright © 2026 FinTech Global
Copyright © 2026 RegTech Analyst
