Every prompt is a record. Most firms are not keeping it.

Advisers carry recordkeeping obligations, privacy obligations over client financial information, and a fiduciary duty that extends to how client data is handled. When staff paste client material into a consumer AI tool, the firm has created a record it does not hold and sent protected information to a third party, without documentation.

A written AI use policy aligned to your recordkeeping and privacy obligations. A tool matrix identifying which products meet your retention requirements. A data handling standard for client financial information. Staff training, and documentation your compliance officer can produce on examination.