BOARD BRIEFING REPORTEuropean Banking & Financial MarketsManagement Board Question · For Discussion

If AI Talks to the Client, Who Owns the Advice?

TopicAI at the Client Interface
AudienceManagement Board · Supervisory Board · Executive Committee
Read Time8 minutes
Target StatusGREEN — once AI-touched client communication is classified, owned, reviewed and reconstructable

At a glance

At that point, the issue is no longer only whether the model generated the right words.

If AI talks to the client, who owns the advice?

Board AskConfirm whether the institution can evidence ownership, classification, review and reconstruction for AI-touched client communication.

Situation

Assume the following situation.

An AI-supported tool drafts a client communication. It explains a product, summarises portfolio risk, prepares a response to a client question or personalises a message for a specific client segment.

The message is reviewed, sent and later challenged.

The client says: this looked like a recommendation.

The institution says: it was only an AI-assisted draft.

At that point, the issue is no longer only whether the model generated the right words.

The issue is whether the communication crossed the line into advice — and whether the institution can evidence who owned the suitability, fairness and accountability of the message.

If AI talks to the client, who owns the advice?

Management Summary

AI at the client interface is not only a technology question. It is a conduct, suitability and accountability question. ESMA's 2024 statement on AI in investment services applies AI use to existing MiFID II obligations, especially organisational requirements, conduct-of-business requirements and the obligation to act in the client's best interest. ESMA states that the best-interest obligation applies irrespective of the tools used by the firm.

The legal boundary is not controlled by the internal label placed on the tool. Under the MiFID II advice framework, a recommendation can amount to investment advice where it is presented as suitable for a person or based on that person's circumstances; ESMA's supervisory briefing says the presentation and the reasonable observer's view matter in determining whether advice is being given.

A strong board answer is not: "The AI only drafted the text." A strong answer shows where AI communication sits on the ladder from drafting to explanation to recommendation to advice; who owns the classification; how suitability, fairness and transparency are checked; and whether the exact client-facing message can be reconstructed.

Management Report Panel

Situation in One Sentence
AI-generated or AI-personalised client communication becomes a board issue when the institution cannot evidence whether the message was drafting, explanation, recommendation or advice.
Key Issue
The client's reasonable understanding matters. If a communication is presented as suitable for the client or based on the client's circumstances, the internal label "draft" or "text suggestion" does not decide the regulatory outcome.
Primary Risk
A client-facing AI message is treated internally as content generation, while externally it may be understood as personal recommendation, product explanation, suitability framing or investment advice.
Board Ask
Confirm whether the institution can evidence ownership, classification, review and reconstruction for AI-touched client communication.
Target RAG
GREEN when client-facing AI communication is classified, owned, suitability-checked, transparently disclosed where required and reconstructable.

Answer Quality Calibration

GREEN Decision-grade answer
AMBER Partially evidenced answer
RED Not decision-grade
InventoryClient-facing AI use cases are mapped across drafting, explanation, recommendation and advice.
InventoryAI use cases are inventoried, but client-communication boundaries are not fully classified.
Inventory“It was only a text suggestion.”
ClassificationEach AI-touched client journey has a named business owner.
ClassificationReview exists, but it is inconsistent across channels and products.
Classification“The adviser reviews it before sending.”
BoundaryThe communication boundary is defined: what may be drafted, explained, personalised or recommended.
BoundarySuitability is checked in advisory journeys, but not always linked to AI-generated wording.
Boundary“The tool does not give recommendations.”
SuitabilitySuitability and conduct checks are embedded where the communication may influence client decisions.
SuitabilityThe role of AI is disclosed in some client interactions, but not consistently.
Suitability“The client sees only approved content.”
Human ReviewHuman review is substantive, not only formal.
Human ReviewRecord-keeping exists, but exact message reconstruction is not yet reliable.
Human Review“The chatbot only explains products.”
DisclosureClients are informed where AI interaction disclosure is required.
DisclosureBusiness ownership exists at product, channel or platform level, but not end-to-end.
Disclosure“The message is generic.”
Record-keepingThe institution can reconstruct what the client saw, when, through which channel and under which approval path.
Record-keeping
Record-keeping“The model is provided by a vendor.”
Ownership
Ownership
Ownership“We have a disclaimer.”

The RAG status calibrates the quality of the answer. It does not judge the institution.

The Client Communication Ladder

01
Draft
AI formulates text. A human reviews, edits and owns the message before the client sees it.
02
Explain
AI explains a product, risk, process or term in general language.
03
Recommend
AI prepares or personalises a recommendation.
04
Advise
AI communicates or supports communication of a personal recommendation to the client.

Who Should Answer

Business OwnerHead of Wealth / Retail / Investment ServicesCompliance / Conduct RiskLegalData Protection OfficerCIO / CTOCISO / Third-Party RiskInternal Audit
Accountability note:
  • AI can generate the words.
  • The adviser may send the message.
  • The platform may host the interaction.
  • The institution owns the client communication.

Evidence the Board Should Request

  1. 01Client-Facing AI Inventory
  2. 02Communication Classification Map
  3. 03Advice Boundary Assessment
  4. 04Suitability Evidence
  5. 05Fair-Clear-Not-Misleading Review
  6. 06Human Review Evidence
  7. 07AI Disclosure Evidence
  8. 08Client Message Reconstruction
  9. 09External-AI-Use Control
  10. 10Complaint Reconstruction Pack

Warning Signals

  • “It was only a text suggestion.”
  • “The adviser reviews it before sending.”
  • “The tool does not give recommendations.”
  • “The client sees only approved content.”
  • “The chatbot only explains products.”
  • “The message is generic.”
  • “The model is provided by a vendor.”
  • “We have a disclaimer.”

None of these statements is necessarily wrong. They are simply not sufficient evidence for board-level reliance.

Path to Green

  • Client communication mapped
  • Boundary classified
  • Suitability controlled
  • Human review meaningful
  • Client interaction transparent
  • Communication reconstructable

The RAG status calibrates the quality of the answer.
It does not judge the institution.

Suggested Next Question

Which AI-touched client communication would create the greatest conduct problem if a client later said: "I understood this as advice"?

Expert commentary — 7 min read

Client-facing AI changes the governance question.

Internal AI use can often be governed through model inventories, access controls, value measurement, human oversight and operational risk. Client-facing AI adds another layer: the client's perception.

That is why this topic matters.

A message may begin as a draft. It may then be personalised. It may be reviewed by an adviser. It may be sent through a private channel. It may explain why a product or strategy could fit a client's situation.

At that point, the internal story — "the model only generated text" — is not enough.

The external question becomes: what did the client reasonably understand?

ESMA's supervisory briefing is important because it focuses on presentation. It states that a recommendation presented as suitable or based on the client's circumstances can amount to investment advice if the other tests are met. It also says that email correspondence, websites, apps, private messages and interactive software systems can be channels through which advice is provided.

This is the practical board insight.

AI client communication is not a single category.

It is a ladder.

At the bottom, AI drafts wording for human-controlled use. In the middle, AI explains products, risks or process steps. Higher up, AI personalises recommendations. At the top, AI participates in client-facing advice.

The governance requirement increases at each step.

A generic product explanation may require accuracy, clarity and disclosure. A personalised recommendation requires suitability. A client-facing advice interaction requires the institution to evidence that the communication was appropriate, fair, reviewed and reconstructable.

That is why classification matters.

The board should not ask only: "Do we use AI in client communication?"

The better question is:

Where on the communication ladder is each use case?

This is not semantic hygiene. It is the operating model.

If a message is Draft, the key control is review before release.

If a message is Explain, the key control is fair, clear and not misleading communication.

If a message is Recommend, the key control is suitability.

If a message is Advise, the key control is full advice governance and reconstruction.

The same model can produce outputs at several levels. A language model can draft a neutral explanation in one context and create a personalised recommendation in another. Therefore, model classification alone is insufficient. The communication must be classified by use, channel, personalisation, wording and client context.

This is also why a named owner matters.

Technology may provide the tool. Compliance may define the boundary. Legal may advise on classification. The adviser may review the message. But the business must own the client outcome.

A client does not experience a model, a policy or a committee.

A client experiences a message.

The institution must therefore be able to answer four questions for every material AI-touched client communication:

  • Who owned it?
  • What was it classified as?
  • Why was it suitable, fair and not misleading?
  • Can we reconstruct exactly what the client saw?

If those answers are visible, AI can support client service safely and professionally.

If they are not visible, the institution may have a communication channel without a reliable accountability chain.

The objective is not to prevent AI from assisting client-facing functions.

The objective is to ensure that AI-assisted communication remains governed communication.

AI can generate the words.

It cannot own the advice.

Selected Source Base

  1. ESMA — Public Statement on AI and Investment Services, 30 May 2024
  2. ESMA — Supervisory Briefing on Understanding the Definition of Advice under MiFID II, ESMA35-43-3861
  3. Directive 2014/65/EU — MiFID II
  4. Commission Delegated Regulation (EU) 2017/565 — Article 9, Suitability and Record-Keeping
  5. Regulation (EU) 2024/1689 — Artificial Intelligence Act
  6. Regulation (EU) 2016/679 — GDPR
  7. IOSCO — Supervisory Toolkit for AI Use in Capital Markets, 2026

← All briefings