CUBE Report: AI Adoption Outpaces Governance as Compliance Costs Surge for Financial Firms

Financial institutions are accelerating the pace of regulatory change adoption, but confidence in the effectiveness of these processes is plummeting. As AI implementation becomes the primary challenge for compliance teams, a widening gap between rapid deployment and the ability to provide regulatory assurance is creating significant operational and personal risks for senior leadership.

What was announced

CUBE’s sixteenth annual Cost of Compliance Report, titled From adoption to assurance: the cost of compliance in an AI-enabled world, highlights a paradox in modern RegTech. While 61% of firms now embed regulatory changes within a single year—a massive jump from just 26% in 2025—only 45% of practitioners believe their approach is actually effective. This represents a 14% drop in confidence year-over-year.

The report, which surveyed over 2,000 senior practitioners across 11 countries, identifies AI implementation as the most pressing hurdle for risk teams, overtaking previous concerns like data governance and ESG. Although 59% of respondents claim AI is already embedded or advanced within their core workflows, trust remains elusive; 57% do not trust AI-generated outputs for critical decision-making. Furthermore, while 10% of firms allow AI to act autonomously in compliance tasks, only 34% feel confident they could demonstrate robust AI governance to a regulator today.

Rising costs continue to plague the sector, with 64% of firms reporting increased expenditure driven by technology and AI governance. This pressure is manifesting in a talent drain: 35% of senior leaders are reportedly declining or exiting roles with direct compliance accountability. This trend is particularly acute in the Indian market, where the figure rises to 47%.

"I read these findings closely every year, and this year what stands out to me is the gap between what firms have deployed at pace with AI and what they can subsequently evidence. The foundations are still being built: just 40% rate their data governance as completely effective, and data quality is the most-cited barrier to scaling AI,"

Ben Richmond, Founder and CEO of CUBE.

The companies involved

CUBE is a global regulatory technology (RegTech) provider focused on automating the compliance lifecycle for large-scale financial institutions. The company specializes in capturing and analyzing global regulatory data to help firms manage change and mitigate risk. By utilizing artificial intelligence and machine learning, CUBE aims to replace manual compliance processes with automated, "always-on" monitoring of the regulatory landscape.

Operating in a highly fragmented market where financial firms must track thousands of regulatory updates across multiple jurisdictions, CUBE has positioned itself as a critical infrastructure layer for enterprise-level compliance. The firm’s focus on "agentic" capabilities and automated governance reflects a broader market shift toward autonomous compliance systems. Led by Founder and CEO Ben Richmond, the company has established itself as a primary source of industry benchmarking through its long-running annual reports, which track the evolving sentiment and spending habits of compliance officers worldwide.

What FF News has reported before

FF News has tracked CUBE’s aggressive expansion into AI-driven compliance solutions over the past year. In September 2026, the firm announced a significant collaboration with IBM to automate global AI compliance via the watsonx.governance platform. This followed the launch of its Agentic Coworker Suite, designed to provide specialized AI support for RegTech tasks. Earlier in 2026, CUBE also partnered with Microsoft to transform risk management workflows. The findings in the 2026 report build upon themes first identified in the Cost of Compliance Report 2025, which initially highlighted the growing role of AI in managing global regulatory complexity.

What this means

The industry is hitting a "governance wall." The speed at which firms are adopting AI tools is clearly outstripping their ability to audit or justify the resulting decisions. This creates a dangerous "black box" effect that regulators are unlikely to tolerate for long. The fact that senior leaders are actively fleeing roles with compliance accountability suggests that the personal liability associated with these unproven systems has become too high. For the RegTech sector, the focus must shift immediately from deployment speed to evidence and assurance. If firms cannot prove why an AI made a specific regulatory call, the efficiency gains of automation will be wiped out by the inevitable fines and reputational damage.