AI Software for FCA Compliance: What the Rules Actually Say

There is no such thing as FCA-compliant AI software. The Financial Conduct Authority does not certify, approve, or badge any AI tool — it has said in writing, “We do not plan to introduce extra regulations for AI.” If you are searching for a product with an FCA tick on the box, you are solving the wrong problem: compliance is a governance question, not a purchasing one.

That matters right now because 75% of UK financial services firms already use AI, with another 10% planning to inside three years — up from 58% two years earlier. The tools are already in the building. The regulator’s attention has moved to how you control them.

There is no “FCA-approved” AI vendor

The FCA’s approach to AI is deliberately technology-neutral. It is “principles-based and focused on outcomes,” and the regulator has been explicit that it will not write AI-specific rules. In early December 2025, chief executive Nikhil Rathi reaffirmed the position, noting the technology changes “every three to six months” — too fast for prescriptive rulebooks to keep up.

So no vendor can sell you compliance. What a good vendor can sell you is software that makes compliance provable: contracts that stop your data training their models, audit trails, explainable outputs, and access controls. The regulator judges the outcome and the accountability around it — not the logo on the tool.

This is the same logic we set out in our guide to AI compliance for UK businesses: five overlapping regimes, one governance answer.

What the FCA actually holds you to

Three existing frameworks do the work that people expect a new “AI Act for finance” to do.

Senior Managers & Certification Regime (SM&CR). The FCA’s rules “emphasise accountability for senior managers and are relevant to the safe use of AI.” A named individual owns the risk. You cannot outsource that accountability to a model or a vendor — buying third-party software transfers the work, never the responsibility. And a third of all AI use cases in UK finance are already third-party implementations, so this is not a corner case.

Consumer Duty. Any AI touching a customer outcome must produce decisions that are fair, explainable, and free of unjustified discrimination. A black-box model that declines a loan and cannot explain why is a Consumer Duty problem before it is a technology problem.

Operational resilience. An AI system embedded in a critical service is now part of your resilience mapping. If it fails, the FCA expects you to have planned for that.

Notice what is missing: a certification step. There is no gate a tool passes through. There is only whether your senior manager can stand behind how it is used.

The gap the survey actually exposed

The 2024 Bank of England and FCA survey is the most useful number in this whole debate. Yes, 75% of firms use AI. But only 34% report a complete understanding of the technologies they run — and 46% admit to only partial understanding.

That is the real regulatory exposure. Not the absence of FCA-approved software, but the presence of AI that the accountable person cannot fully explain. It is also why “shadow AI” — staff quietly using unapproved consumer tools — is the quiet risk sitting under most firms. We covered the three-step fix in Shadow AI: what UK firms should do.

Buying a better tool does not close the understanding gap. Governance does.

AI Live Testing: the closest thing to a green light

If there is a signal to watch, it is the FCA’s AI Live Testing service, which launched on 3 December 2025. It pairs firms with the regulator and a technical partner, Advai, to run AI systems in live market conditions under supervision.

The first cohort included NatWest, Monzo, Santander, Scottish Widows, Gain Credit, Homeprotect and Snorkl. A second cohort took applications between 19 January and 24 March 2026, with testing from April, and the FCA will publish an evaluation report in Q1 2027.

Read it correctly, though. Live Testing is a supervised sandbox for firms deploying novel or higher-risk AI — not an approval stamp you buy your way into, and not a prerequisite for using AI at all. For the vast majority of firms running an off-the-shelf assistant over internal documents, the job is governance, not enrolment.

How to buy AI software that survives an FCA conversation

You are not buying compliance. You are buying evidence. A tool worth deploying in a regulated firm should let you answer “yes” to all of these:

Get those six right and the specific brand of software becomes almost interchangeable. Get them wrong and no vendor’s marketing will save you in a supervisory conversation.

The bottom line

The search for “FCA-compliant AI software” is really a search for confidence. The FCA has told you where confidence comes from: existing rules, a named accountable person, and the ability to explain what your AI does. The 75% adoption figure means the tools are already here; the 34% understanding figure means most firms have not yet done the governance that makes them safe.

That is the work — and it is a weekend of structure, not a multi-year programme.

General information for UK firms, not legal or compliance advice. Verify your obligations against current FCA guidance and, where needed, take professional advice. Last updated: 15 July 2026. Sources: FCA AI and the FCA: our approach; FCA AI Live Testing; Bank of England & FCA Artificial intelligence in UK financial services 2024.