The NCUA's Credit Union AI Resource Center, added to ncua.gov in August 2025 and last updated April 28, 2026, is the agency's only AI-specific publication for credit unions. It states that 'NCUA has not issued AI specific rules or regulation' and that 'AI is not treated differently than any other innovative technology,' and it tells credit unions to identify and monitor AI-specific risks, perform due diligence on AI vendors, and ensure board and management oversight, pointing to NIST, Treasury AIEOG, COSO, and CISA materials.
| Document | NCUA Credit Union AI Resource Center — Artificial Intelligence (AI) — Credit Union AI Resource Center and AI Resources page |
| Issued by | National Credit Union Administration |
| Type | Guidance |
| Status | In force |
| Published | Aug 1, 2025 |
| Effective | Aug 1, 2025 |
| Applies to | All federally insured credit unions considering or using AI, and their third-party AI service providers |
| Official source | ncua.gov ↗ |
| Use cases | AI governance (general) · Third-party & vendor AI · Cybersecurity · Data & privacy · Customer-facing chatbots |
What are the key points of NCUA Credit Union AI Resource Center?
- Explicit statement that existing NCUA regulations are technology-neutral and apply to AI (e.g., Part 748 information security applies whether service is by email, phone, or AI tool)
- Expectations: identify risks unique to AI or automated tools; monitor and measure them; implement controls for operational, compliance, and security risk
- Third-party AI: understand how the product functions, its risks, and the vendor's safeguards before deployment
- Board and management oversight required for safe and sound operation
- Examiners evaluate AI under existing frameworks: safety and soundness, regulatory compliance, internal controls, ongoing monitoring, third-party due diligence
- References NIST AI resources, Treasury's AI Executive Oversight Group cybersecurity tools, COSO's AI and ERM research, and CISA secure-AI guidance
- Sections on use cases, implementation, risk management, data security, and cybersecurity risks; refreshed in December 2025 and April 2026
What did NCUA Credit Union AI Resource Center change for banks?
Before August 2025 credit unions had no NCUA document addressing AI at all. The resource center does not create obligations, but it tells credit unions which existing rules examiners will apply and what documentation (risk identification, vendor due diligence, board oversight) they should expect to be asked for. It is a resource page, not a Letter to Credit Unions, and carries no letter number.
Is the NCUA AI resource page binding?
No. It is informational and says so, stating the NCUA has not issued AI-specific rules. It does, however, describe the existing rules and due-diligence expectations examiners apply to AI.
Which frameworks does the NCUA point credit unions to for AI?
NIST AI resources (including the AI Risk Management Framework), Treasury's AIEOG tools, COSO's guidance on AI and enterprise risk management, and CISA's AI data-security guidance.
Should a credit union have a board-approved AI policy?
The page does not mandate one, but it expects board and management oversight and documented risk controls, which in practice most credit unions satisfy with a board-approved AI policy tied to their vendor-management program.
| Date | Document | Status |
|---|---|---|
| Feb 12, 2026 | Hauptman Senate testimony (Feb 2026) — Written Testimony of NCUA Chairman Kyle S. Hauptman before the U.S. Senate Committee on Banking, Housing, and Urban Affairs | Final |
| Jan 14, 2026 | NCUA Letter 26-CU-01 — NCUA's 2026 Supervisory Priorities | In force |
| Sep 1, 2025 | NCUA AI Compliance Plan (2025) — NCUA Artificial Intelligence Compliance Plan | Final |
| Jul 24, 2025 | NCUA Board AI briefing (Jul 2025) — Board Briefing: Artificial Intelligence and Its Use Within the Credit Union Industry and the NCUA | Final |
| Sep 21, 2023 | NCUA Financial Innovation Rule (2023) — Financial Innovation: Loan Participations, Eligible Obligations, and Notes of Liquidating Credit Unions (final rule) | In force |
| May 13, 2022 | NCUA testimony to House AI Task Force (2022) — Written Testimony of Kelly Lay, Director of the Office of Examination and Insurance, before the House Financial Services Task Force on Artificial Intelligence | Final |
Follow every document these regulators publish
6 curated AI stories for banking executives · Every morning · Free
Subscribe to BankingNewsAI →