# American Express: Responsible AI

Source: https://www.bankingnewsai.com/banks/american-express/responsible-ai
Last updated: Oct 31, 2026

*Part of the [American Express AI strategy profile](https://www.bankingnewsai.com/banks/american-express).*

## How does American Express govern AI and manage AI risk?

American Express governs AI through its board Risk Committee and a written policy. The 2026 proxy, filed March 25, 2026, says the Risk Committee 'is primarily responsible for oversight of risks and opportunities related to our use of AI and GenAI' and that the company has adopted an Artificial Intelligence Risk Management Policy that 'addresses the use of all AI systems and applies to all colleagues, products and lines of business', follows the three lines of defense and also governs third-party use of AI. In management, CIO Ravi Radhakrishnan said in May 2025 that generative AI arrived with a governance framework including 'a cross-functional AI council', and CTO Hilary Packer described an 'AI firewall' around the model layer and 'an extensive model risk management and validation process'. Every 10-K since the 2023 edition says Amex performs 'extensive reviews and testing' of AI/ML models; the 2025 10-K warns of 'biased or inaccurate results' and 'hallucinatory' outputs. For AI agents, Amex published its Intent Intelligence Framework on October 13, 2026, and Stephen Squeri said on October 23, 2026 that Amex is 'not going to let assistants run rogue through our systems'. The backdrop is a compliance one: on October 8, 2026 the Federal Reserve and the OCC took enforcement actions over anti-money-laundering failures, with a $350 million OCC penalty; neither announcement mentions AI. No standalone set of AI principles was found in the sources reviewed. ([U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000110465926034163/tm2519434-8_def14a.htm), [Forbes](https://www.forbes.com/sites/peterhigh/2025/05/09/ravi-radhakrishnan-on-driving-ai-innovation-at-american-express/), [VentureBeat](https://venturebeat.com/ai/how-amex-uses-ai-to-increase-efficiency-40-fewer-it-escalations-85-travel-assistance-boost), [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000000496224000013/axp-20231231.htm), [American Express (SEC filings)](https://www.sec.gov/Archives/edgar/data/4962/000000496226000080/axp-20251231.htm), [TechCrunch](https://techcrunch.com/2026/10/13/amex-introduces-a-framework-to-prevent-ai-agents-from-making-unauthorized-purchases), [The Motley Fool](https://fool.com/earnings/call-transcripts/2026/10/23/amex-axp-q3-2026-earnings-call-transcript), [Federal Reserve Board](https://www.federalreserve.gov/newsevents/pressreleases/enforcement20261008a.htm), [Office of the Comptroller of the Currency](https://www.occ.gov/news-issuances/news-releases/2026/nr-occ-2026-87.html))

## Who oversees AI at American Express, from the board down?

'Disclosed' means it is in an SEC filing; 'Stated' means a named executive said it on the record.

| Body or policy | What it does for AI | Status | Source date | Sources |
| --- | --- | --- | --- | --- |
| Risk Committee (board) | Primary oversight of AI and GenAI risks and opportunities; 'focused on overseeing and monitoring our AI governance structure, including appropriate guardrails, training and consideration of risks and benefits'; receives regular reports on emerging technology risks, including AI | Disclosed | March 25, 2026 | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000110465926034163/tm2519434-8_def14a.htm) |
| Full board | Receives regular updates on AI and GenAI use 'in strategic business presentations with Management and through risk reporting' | Disclosed | March 25, 2026 | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000110465926034163/tm2519434-8_def14a.htm) |
| Artificial Intelligence Risk Management Policy | Covers 'all AI systems' across colleagues, products and lines of business; follows the three lines of defense; sets enterprise-level escalation to Management or the Board; governs third-party use of AI | Disclosed | March 25, 2026 | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000110465926034163/tm2519434-8_def14a.htm) |
| Enterprise Risk Management Committee (ERMC) | Highest-level management risk committee, co-chaired by the CEO and the Chief Risk Officer; runs the Risk Governance Framework the AI policy aligns with | Disclosed | March 25, 2026 | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000110465926034163/tm2519434-8_def14a.htm) |
| Cross-functional AI council | Part of the governance framework set up for generative AI; Radhakrishnan: 'It was important that we think about responsible use even during early experimentation'. A council first identified 500 potential use cases and cut them to 70 | Stated | April 2, 2025; May 9, 2025 | [Forbes](https://www.forbes.com/sites/peterhigh/2025/05/09/ravi-radhakrishnan-on-driving-ai-innovation-at-american-express/), [VentureBeat](https://venturebeat.com/ai/how-amex-uses-ai-to-increase-efficiency-40-fewer-it-escalations-85-travel-assistance-boost) |
| Enterprise AI Platforms | Berta Rodriguez-Hervas, SVP since January: 'trust by design', with explainability, audit trails and data lineage built into systems, and repeatable model validation, monitoring and observability | Stated | July 20, 2026 | [American Express](https://www.americanexpress.com/en-us/newsroom/articles/innovation/building-the-future-of-ai-at-american-express--meet-berta-rodrig.html) |
| Chief Risk Officer | Jodi Richard, U.S. Bank's chief risk officer, named CRO of American Express and its national bank effective January 25, 2027, reporting to Squeri; Doug Tabish moves to enterprise shared services | Announced | October 30, 2026 | [Payments Dive](https://paymentsdive.com/news/amex-us-bank-risk-chief-departs-richard-compliance-banking/873293) |

## What has American Express disclosed about AI risk, and when?

From 10-K and 10-Q filings, the proxy, the Q3 2026 call and the agentic-commerce framework. Quotes are verbatim.

| Date | Item | What it says | Sources |
| --- | --- | --- | --- |
| February 9, 2024 | 2023 Form 10-K, model risk | Amex uses 'artificial intelligence and machine learning (AI/ML) models for a variety of business use cases' and performs 'extensive reviews and testing to reduce the risk that these AI/ML techniques result in adverse consequences' | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000000496224000013/axp-20231231.htm) |
| April 19, 2024 | Q1 2024 Form 10-Q | Laws on automated decision making, AI and machine learning 'are still evolving' and may restrict 'our ability to use artificial intelligence and machine learning' | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000000496224000031/axp-20240331.htm) |
| February 7, 2025 | 2024 Form 10-K, model risk | The same review-and-testing statement, now covering AI/ML models 'including Generative AI tools' | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000000496225000016/axp-20241231.htm) |
| April 2, 2025 | CTO interview | Packer: open and closed-source models, an orchestration layer that swaps models by use case, and an 'AI firewall' enveloping it all | [VentureBeat](https://venturebeat.com/ai/how-amex-uses-ai-to-increase-efficiency-40-fewer-it-escalations-85-travel-assistance-boost) |
| April 18, 2025 | Q1 2025 Form 10-Q | New AI laws are 'reshaping how we develop, deploy and manage artificial intelligence systems', with obligations on data use, recordkeeping, transparency and human oversight | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000000496225000045/axp-20250331.htm) |
| February 6, 2026 | 2025 Form 10-K, risk factors | Names the EU AI Act and AI laws in California, Colorado and Utah; warns of 'flaws in models or datasets that may result in biased or inaccurate results' and 'hallucinatory' outputs, and that model complexity can make it hard to 'understand and explain their outputs' | [American Express (SEC filings)](https://www.sec.gov/Archives/edgar/data/4962/000000496226000080/axp-20251231.htm) |
| March 25, 2026 | 2026 proxy statement | A section on board oversight of AI describes the Risk Committee's role and the Artificial Intelligence Risk Management Policy | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000110465926034163/tm2519434-8_def14a.htm) |
| October 13, 2026 | Intent Intelligence Framework | A Create Intent API captures the customer's instructions; the customer authenticates and signs off; an Intent ID and a Proof of Intent Token tie the agent's payment credential to what was authorized | [TechCrunch](https://techcrunch.com/2026/10/13/amex-introduces-a-framework-to-prevent-ai-agents-from-making-unauthorized-purchases) |
| October 23, 2026 | Q3 2026 call | Squeri: 'we're going to take a risk-based approach'; agents get access only if 'approved through API or MCP channels' | [The Motley Fool](https://fool.com/earnings/call-transcripts/2026/10/23/amex-axp-q3-2026-earnings-call-transcript) |
| October 23, 2026 | Q3 2026 Form 10-Q | Lists AI-assisted deepfake attacks and 'exploitation of vulnerabilities (including by AI models)' among cyber threats; repeats that AI rules impose obligations on data use, recordkeeping, transparency and human oversight | [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000000496226000409/axp-20260930.htm) |

## What regulatory actions frame American Express's AI governance?

On October 8, 2026 the Federal Reserve announced an enforcement action against American Express Company over its failure to sufficiently detect and report suspicious activity related to money laundering, and the OCC issued a cease-and-desist order and a $350 million civil money penalty against American Express National Bank. The OCC cited inadequate resources, systemic internal control gaps, weak independent testing and weak BSA/AML training, and a failure to timely report approximately $13 billion of suspected trade-based money laundering over the past decade. ([Federal Reserve Board](https://www.federalreserve.gov/newsevents/pressreleases/enforcement20261008a.htm), [Office of the Comptroller of the Currency](https://www.occ.gov/news-issuances/news-releases/2026/nr-occ-2026-87.html))

Neither regulator's announcement mentions AI. On the October 23, 2026 call Squeri said the orders do not impose an asset cap and that 'the deficiencies cited in the consent order should not have occurred, and we are accountable for addressing them thoroughly'; the Q3 10-Q says Amex is working to remediate deficiencies, 'including to satisfy the requirements of regulatory orders'. ([The Motley Fool](https://fool.com/earnings/call-transcripts/2026/10/23/amex-axp-q3-2026-earnings-call-transcript), [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000000496226000409/axp-20260930.htm))

The risk leadership changed a week later: Payments Dive reported on October 30, 2026 that Jodi Richard, a former OCC examiner, will join as chief risk officer and head of global risk and compliance. The proxy says the chief risk officer co-chairs the ERMC, the management committee that runs the Risk Governance Framework the AI policy follows. ([Payments Dive](https://paymentsdive.com/news/amex-us-bank-risk-chief-departs-richard-compliance-banking/873293), [U.S. Securities and Exchange Commission (EDGAR)](https://www.sec.gov/Archives/edgar/data/4962/000110465926034163/tm2519434-8_def14a.htm))

## What does the Amex profile record on this topic?

| Date | Move | Detail | Sources |
| --- | --- | --- | --- |
| Oct 13, 2026 | Intent Intelligence framework published | Amex releases its framework and Create Intent API for capturing and authenticating purchase intent before an agent transacts; Gebb and VP Hannah Bozian describe it as a way to reduce disputes. | [American Express via FT Markets](https://markets.ft.com/data/announce/detail?dockey=600-202610130930BIZWIRE_USPRX____20261013_BW636634-1), [TechCrunch](https://techcrunch.com/2026/10/13/amex-introduces-a-framework-to-prevent-ai-agents-from-making-unauthorized-purchases) |
| Oct 8, 2026 | Agentic commerce playbook and merchant advisory council | Reported October 8 (released earlier that week): Amex releases a Teneo survey in which about two-thirds of US consumers use AI tools to compare prices and only 15% would let an agent make expensive purchases, and says it is convening a merchant advisory council. | [Payments Dive](https://paymentsdive.com/news/amex-advises-businesses-on-ai/832423) |
| Jul 24, 2026 | Q2 call: closed loop and intent as the answer to agentic fraud | Squeri says agentic commerce is fraught with fraud and hallucinations and that knowing what the cardholder wanted and what the merchant delivered gives Amex an advantage; agentic initiatives were not in the year's original spending plan. | [Investing.com](https://investing.com/news/transcripts/earnings-call-transcript-american-express-beats-q2-2026-eps-shares-fall-93CH-4812024) |
| Jul 24, 2026 | Q2 10-Q lists agentic commerce among strategic dependencies | The filing ties results partly to the ACE kit, Agent Purchase Protection, making Membership assets discoverable on AI platforms and embedding AI into internal processes; it also cites AI usage costs. | [American Express (SEC filings)](https://www.sec.gov/Archives/edgar/data/4962/000000496226000322/axp-20260630.htm) |
| May 19, 2026 | Decentralised-network LLM patent granted | US 12,632,648 B2 covers verifying answers from several LLM providers over a decentralised network to cut hallucinated responses; two further LLM security patents were granted on March 17 and April 7, 2026. | [Google Patents (USPTO)](https://patents.google.com/patent/US12632648B2/en) |
| Apr 23, 2026 | Q1 call: 'data is king' in the agentic world | Squeri reports a 30% benefit for programmers, says the ACE kit requires an agent to declare intent so it can be matched with the purchase, and flags coming announcements with leading AI companies. | [The Motley Fool](https://fool.com/earnings/call-transcripts/2026/04/23/amex-axp-q1-2026-earnings-call-transcript) |
| Apr 14, 2026 | ACE developer kit and Agent Purchase Protection | Integrate Amex payments in agentic experiences; protection for purchases by registered AI agents. | [American Express](https://www.americanexpress.com/en-us/newsroom/articles/innovation/american-express-debuts-agentic-commerce-experiences--ace--devel.html), [American Banker](https://www.americanbanker.com/payments/news/amex-introduces-agentic-commerce-developers-kit) |
| Feb 6, 2026 | 10-K: agentic commerce as a competitive and model risk | Autonomous AI agents transacting for users could disintermediate customer relationships; AI flaws, bias and hallucinations listed among the risks. | [American Express (SEC filings)](https://www.sec.gov/Archives/edgar/data/4962/000000496226000080/axp-20251231.htm) |
| Jan 20, 2026 | LLM risk-mitigation patent granted | US 12,530,174 B2, filed October 2023 by American Express Travel Related Services Company, covers generating risk-mitigation code for applications that call a network LLM service. | [Google Patents (USPTO)](https://patents.google.com/patent/US12530174B2/en) |
| Jul 10, 2025 | Packer: agents need a control plane | At VB Transform, Packer describes internal agents such as one that reviews software pull requests, and modular 'brains' for brand, privacy, security and legal rules that agents must consult before acting. | [VentureBeat](https://venturebeat.com/ai/dont-wait-for-a-bake-off-how-intuit-and-amex-beat-competitors-to-production-ai-agents) |
| May 9, 2025 | CIO describes the AI governance model | Ravi Radhakrishnan says Amex has used AI for credit and fraud for over 15 years, built a cross-functional AI council and an enablement layer over multiple models, and brought data governance and the Chief Data Office under technology. | [Forbes](https://www.forbes.com/sites/peterhigh/2025/05/09/ravi-radhakrishnan-on-driving-ai-innovation-at-american-express/) |
| Apr 2, 2025 | Packer on Amex's enterprise generative AI | CTO Hilary Packer says a council identified 500 use cases and 70 were in implementation; 9,000 engineers use GitHub Copilot, the IT chatbot (live since October 2023) resolves 40% more queries without escalation, and a travel counselor assistant serves 5,000 counselors in 19 markets. | [VentureBeat](https://venturebeat.com/ai/how-amex-uses-ai-to-increase-efficiency-40-fewer-it-escalations-85-travel-assistance-boost) |

## Common questions

### Does American Express have an AI policy?

Yes. Its 2026 proxy statement says it has adopted an Artificial Intelligence Risk Management Policy that covers the use of all AI systems, applies to all colleagues, products and lines of business, follows the three lines of defense, sets enterprise-level escalation to management or the board and governs third parties' use of AI. The policy text itself is not published, and no standalone set of AI principles was found.

### Who oversees AI risk at American Express?

The board's Risk Committee has primary oversight of AI and GenAI risks and opportunities, including the AI governance structure, guardrails and training, per the March 2026 proxy. In management, the Enterprise Risk Management Committee, co-chaired by the CEO and chief risk officer, runs the Risk Governance Framework; a cross-functional AI council was set up for generative AI, and Jodi Richard becomes chief risk officer on January 25, 2027.

### How does American Express control AI agents that shop for customers?

Two ways so far. Its Intent Intelligence Framework, published October 13, 2026, captures and authenticates what the customer told the agent to buy before the purchase, and binds the payment credential to it. On the October 23, 2026 call Stephen Squeri said Amex will take a risk-based approach and admit only agents approved through API or MCP channels.

### Were the 2026 Fed and OCC actions against Amex about AI?

No. The October 8, 2026 actions concern anti-money-laundering compliance: the OCC fined American Express National Bank $350 million and cited inadequate resources, control gaps, weak testing and training, and about $13 billion of suspected trade-based money laundering reported late. Neither announcement mentions AI.

### What AI risks does American Express disclose in its 10-K?

The 2025 10-K, filed February 6, 2026, warns of flawed models or datasets producing biased or inaccurate results, generative AI's hallucinatory outputs, outputs that are hard to explain, AI-enabled fraud such as synthetic voice, unsettled intellectual property rules for AI, and new AI laws including the EU AI Act and state laws in California, Colorado and Utah.
## Deeper on Amex

- [What is American Express's AI strategy and technology vision?](https://www.bankingnewsai.com/banks/american-express/ai-strategy)
- [What AI patents, partnerships and investments does American Express have?](https://www.bankingnewsai.com/banks/american-express/ai-research-patents-partnerships)
- [How does American Express use AI for fraud detection and credit decisions?](https://www.bankingnewsai.com/banks/american-express/fraud-and-credit-ai)
- [How is American Express preparing its payments network for AI agents?](https://www.bankingnewsai.com/banks/american-express/payments-ai)
- [What is American Express's role in the digital payments transformation?](https://www.bankingnewsai.com/banks/american-express/digital-payments-transformation)
- [How is AI changing American Express's workforce?](https://www.bankingnewsai.com/banks/american-express/ai-workforce)
- [What AI assistants does American Express offer customers and employees?](https://www.bankingnewsai.com/banks/american-express/virtual-assistant)


---

Canonical page: https://www.bankingnewsai.com/banks/american-express/responsible-ai
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (45 authorities, 260 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.