An examiner asks a CCO why a specific alert was cleared six weeks ago, and the honest answer is that the review happened, the judgment was sound, but nobody wrote down why. That gap, between work that was done well and work that can be proven to have been done well, now matters a lot more.
AI Supervision Is Now an Exam Priority
Speaking at SIFMA’s Compliance and Legal Society Midwest Regional Seminar in St. Louis in June, SEC Examinations Director Keith Cassidy flagged AI supervision as an active exam priority for 2026. Examiners will be assessing whether firms have adequate policies and procedures governing how AI technologies are used and overseen.
That’s the headline for 2026: if you’re using AI in supervision, expect examiners to ask how you’re overseeing it.
Compliant vs. Defensible
Being compliant means your program meets the standard. Being defensible means you can prove it did, after the fact, to someone who wasn’t in the room and has no reason to take your word for it.
That gap rarely opens through negligence. It opens through the ordinary texture of the job; a judgment call that was right but never logged, an escalation that happened over a conversation and went no further, a decision made by someone with 20 years of instinct whose reasoning lived entirely in their head.
In a stable regulatory environment, that instinct is an asset. A seasoned supervisor who reads a situation correctly and moves on is exactly what good compliance looks like day-to-day. The problem is that instinct doesn’t leave a paper trail. The tools being used, the communications being captured, and what examiners expect to see when they arrive are all changing fast enough that muscle memory alone isn’t enough.
Good compliance work that leaves no trace looks, to an examiner, like no compliance work at all.
Making the Reasoning Visible
Most supervision programs record outcomes, not reasoning. A communication was reviewed. An alert was cleared. The decision is logged, but the thinking behind it isn’t, and that’s usually fine until an examiner asks why.
The firms that handle exams well treat the reasoning behind a decision as part of the decision itself. The review isn’t finished when the call is made. It’s finished when the call is recorded in a way that would make sense to someone with no context. Documentation discipline and supervision discipline are different skills, and building one doesn’t automatically build the other.
That gap gets harder to close as AI supervision tools become standard. When a tool flags a communication, the reasoning behind that flag needs to exist in the record, not just in the reviewer’s head. The question examiners will ask isn’t just whether AI is being used, but whether every flag, and every decision made on top of it, is accessible.
What Firms Should Be Asking Now
Cassidy also addressed the broader exam environment in St. Louis, reinforcing the more collaborative posture of the Atkins-era SEC. For firms that can back up their program with evidence, that’s a genuine opportunity: an examiner relationship where good-faith compliance work gets recognized as such.
However, that only works if the reasoning can be shown. The firms who benefit most from this environment won’t be the ones who relaxed when enforcement activity slowed, but those who used the quieter period to ask a harder question: if an examiner walked in and asked us to reconstruct an AI supervision decision from two months ago, could we do it?
Compliance that leaves no trace offers no protection.
Jamie Hoyle is SVP, Product at RedOak/MirrorWeb. The two companies combined in 2026 to deliver one platform for governing the full regulated communication lifecycle. Jamie joined MirrorWeb as Lead Software Engineer in 2017, eventually transitioning to Product and spearheading the development of their flagship communications supervision platform, MirrorWeb Insight.
In 2024, Jamie relocated to Austin, Texas, to embed himself in the heart of the U.S. compliance landscape and stay close to the customers shaping the future of digital communications oversight.
Photo courtesy Alex Shuper for Unsplash+
