BofA has 7 dated AI-agent moves on the record, from Feb 25, 2026 to Oct 27, 2026, and 2 agent use cases on its profile, 2 in production (EricaAssist and employee tools and AI risk factors and model governance). The latest move, on Oct 27, 2026: Customer email: do not share credentials with AI tools or agents (TechCrunch). Each row below is the bank's own dated entry with the stage it describes and its source; the strategy, numbers, leaders and regulators are on BofA's AI strategy page, and the same rows sit in date order with every other bank on the tracker.
What AI agents does BofA run, and at what stage?
BofA's profile records 2 agent use cases in production: EricaAssist and employee tools and AI risk factors and model governance.
- In production
EricaAssist and employee tools
Human-assisted AI agent for customer-service staff; Merrill advisor meeting journey; 400,000 prompts a day across the workforce.
- In production
AI risk factors and model governance
The 10-K covers autonomous AI agents, third-party AI models with limited visibility into training data, inaccurate outputs and bias, and says models may be ineffective if AI applications 'are not developed and trained properly or contain biases'.
What has BofA announced about AI agents, and when?
Oct 20262 moves
Customer email: do not share credentials with AI tools or agentsAnnounced
A bank email titled 'Protecting your finances in the AI World' tells customers never to share their username and password with an outside service, 'including an AI-enabled tool or agent that offers to act on your behalf', and says they are responsible for activity resulting from that access; a spokesperson confirmed its authenticity to TechCrunch.
Evident AI Symposium: Orchestra routing, guardrails and a doubled 2027 AI budgetAnnounced
Gopalkrishnan said the bank plans to double its AI budget next year, with spending focused on Erica handling more advanced conversations, institutional memory and more complex transactions; the Orchestra routing layer uses a small classifier model to send each query to the most cost-effective model ('We didn't want to be beholden to any given model'), and agents must stay within their allotted runtime and cannot complete multiple tasks autonomously.
Sep 20262 moves
DeMare: coding is the clearest AI returnAnnounced
At a BofA Securities conference the co-president says about 20,000 developers use coding agents for a 15% to 20% gain, about 95% of staff have AI access, and the bank is assessing third-party providers; Gopalkrishnan says AI investment interest is more than twice last year's and spending will probably double.
Moynihan on agent risk: 'we just don't do that'Announced
After a weekend of public alarm over autonomous AI agents, the CEO says the bank keeps agents under control rather than 'left to operate'.
Jul 20261 move
EricaAssist gets generative AIIn production
Employee-facing agent summarises the call reason and recommends next steps; average call time falls by nearly a minute.
Apr 20261 move
Q1 2026 call: all 200,000 teammates have AI accessAnnounced
Moynihan cites 90 AI installations working and says the bank will be 'more agentic versus prompt' as its 90,000-strong sales force moves to agent tools.
Feb 20261 move
2025 10-K: autonomous AI agents and third-party models as risksIn production
The annual report says expanded use of AI, 'including emerging third-party AI services and autonomous AI agents', may bring data risk, unpredictable system interactions and AI failure, and notes internal AI governance frameworks.
Does BofA block third-party AI agents?
2 relations are on the record for BofA and outside agents: restricted for any third-party agent since Oct 14, 2026; partnered for Sierra Poppy (Personal Agent Protocol) since Oct 9, 2026. Every bank and agent side by side is on the agent access tracker.
- Any third-party agent · restricted · Oct 14, 2026 — “"We strongly believe there should be a human in the loop to authorise money moving out of your account," Moynihan told CNBC.” (Retail Banker International via Yahoo Finance) · scope: log-in with the customer's credentials, transactions evidence →
- Sierra Poppy (Personal Agent Protocol) · partnered · Oct 9, 2026 — “today we're publishing a draft of Personal Agent Protocol, known as Poppy, and announcing an additional 35 design partners: Adyen, Atomic, Bank of America, BBVA, Chime, Cigna, Cloudflare, Comcast, DIRECTV, ElevenLabs, FOX, Gap Inc.” (Sierra) evidence →
What has been reported about BofA's agents?
In the daily brief:
- Bank of America emails customers: don't share logins with AI agents · Oct 29, 2026
- Five largest US banks are blocking external AI agents, American Banker reports · Oct 28, 2026
- Banks restrict third-party AI agents' access to customer accounts · Oct 23, 2026
- Citi and Bank of America restrict AI agents' access to customer accounts · Oct 19, 2026
Headlines from the BofA news stream, publisher and date only:
- Bank of America to Customers: Keep Your Password Away From Your AI Agent
finance.yahoo.com · Oct 28, 2026
- Can AI Agents Crack Bank of America’s $2 Trillion Deposit Moat? Here’s the Evidence So Far
finance.yahoo.com · Oct 1, 2026
What AI agents does BofA have in production?
BofA's profile records 2 agent use cases in production: EricaAssist and employee tools and AI risk factors and model governance.
What has BofA announced about AI agents, and when?
7 dated moves from Feb 25, 2026 to Oct 27, 2026: 2 describe an agent in production, 0 a rollout, 0 a pilot and 5 an announcement. The latest, on Oct 27, 2026: Customer email: do not share credentials with AI tools or agents (TechCrunch).
Where does this timeline come from?
From Bank of America's profile on this site, which dates each move and cites its source; the build checks every link. The stage is the one the bank describes, and nothing here is written by a model. The profile is refreshed on a biweekly routine; the record last changed on Nov 1, 2026.
Other banks with an agent timeline:
When BofA puts an agent into production, you'll read it the next morning.
when one of the banks we cover moves on AI, it is in the next morning's brief · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning