# Bank of America: Responsible AI

Source: https://www.bankingnewsai.com/banks/bank-of-america/responsible-ai
Last updated: Oct 16, 2026

*Part of the [Bank of America AI strategy profile](https://www.bankingnewsai.com/banks/bank-of-america).*

## How does Bank of America govern responsible AI?

Bank of America governs AI project by project. CTIO Hari Gopalkrishnan said at Fortune's AIQ Summit on October 1, 2026 that every implementation is evaluated across 16 risk dimensions, including privacy, bias, workforce implications and intellectual property, with continuous guardrails and monitoring; he cited a fraud model that disadvantages demographic groups, or a chatbot that fails customers with particular accents, as the risks in view. The bank's stated posture since April 2025 is 'human oversight, transparency, and accountability for all outcomes', and Gopalkrishnan has said it has 'zero tolerance for things like hallucinations, bias'. The 2025 10-K, filed February 25, 2026, names autonomous AI agents and third-party AI services with limited visibility into training data as risks. On agents, Moynihan said on September 14, 2026 of agents 'just left to operate': 'We just don't do that'; in October he said the bank is working with the AI industry to argue for human authorization of agent payments; with five peer banks it published principles for trusted agentic commerce on September 22, 2026. The year's hardest test was security: 1,000 contractors were added to patch flaws exposed by Anthropic's Mythos. ([Fortune](https://fortune.com/2026/10/02/bank-of-america-sp-global-why-ai-success-starts-governance-and-data), [Fortune](https://fortune.com/2026/10/01/ai-regulated-industries-bank-of-america-sp-global), [Bank of America Newsroom](https://newsroom.bankofamerica.com/content/newsroom/press-releases/2025/04/ai-adoption-by-bofa-s-global-workforce-improves-productivity--cl.html), [American Banker](https://www.americanbanker.com/news/bofas-cto-is-12-on-the-most-innovative-people-in-finance-ranking), [Bank of America (SEC filings)](https://www.sec.gov/Archives/edgar/data/70858/000007085826000157/bac-20251231.htm), [American Banker](https://www.americanbanker.com/news/bofa-and-pnc-respond-to-rising-ai-fears), [The Verge](https://www.theverge.com/ai-artificial-intelligence/1011767/bank-of-america-wants-a-human-in-the-loop), [Bank of America Newsroom](https://newsroom.bankofamerica.com/content/newsroom/press-releases/2026/09/global-banks-collaborate-on-principles-for-trusted-agentic-comme.html), [CNBC](https://www.cnbc.com/2026/10/14/anthropic-mythos-bank-of-america-hiring-cost.html))

## What principles and review process does Bank of America apply to AI?

| Item | What it says | Who | Date | Sources |
| --- | --- | --- | --- | --- |
| Oversight principle | 'Human oversight, transparency, and accountability for all outcomes' | Bank of America | April 1, 2025 | [Bank of America Newsroom](https://newsroom.bankofamerica.com/content/newsroom/press-releases/2025/04/ai-adoption-by-bofa-s-global-workforce-improves-productivity--cl.html) |
| 16 risk dimensions | Every AI implementation evaluated on 16 dimensions including privacy, bias, workforce implications and intellectual property; guardrails, evaluation and monitoring continue after launch | Hari Gopalkrishnan, CTIO | October 1-2, 2026 | [Fortune](https://fortune.com/2026/10/02/bank-of-america-sp-global-why-ai-success-starts-governance-and-data), [Fortune](https://fortune.com/2026/10/01/ai-regulated-industries-bank-of-america-sp-global) |
| Use AI only where needed | 'One of the biggest mistakes we see is rushing to AI as a solution when deterministic models can do the job just as well' | Gopalkrishnan | October 2, 2026 | [Fortune](https://fortune.com/2026/10/02/bank-of-america-sp-global-why-ai-success-starts-governance-and-data) |
| Accuracy bar | 'We have zero tolerance for things like hallucinations, bias' | Gopalkrishnan | June 1, 2026 | [American Banker](https://www.americanbanker.com/news/bofas-cto-is-12-on-the-most-innovative-people-in-finance-ranking) |
| Data quality | 'The data has to be perfect'; accuracy over efficiency and cost savings | Brian Moynihan, CEO | June 8, 2026 | [American Banker](https://www.americanbanker.com/news/the-data-has-to-be-perfect-bofa-ceo-moynihan-on-ai) |
| Governance as a driver | Governance is one of four AI strategy drivers: 'If you overdo it, you stall innovation. If you underdo it, you introduce a lot of risk' | Gopalkrishnan | April 15, 2026 | [Banking Dive](https://bankingdive.com/news/bank-of-america-gopalkrishnan-ai-strategy/817544) |
| Cross-border governance | Governance needs constant investment to stay compliant with 'whatever is asked for in each of these jurisdictions' | Bernard Mensah, president of International | November 12, 2025 | [Banking Dive](https://bankingdive.com/news/bank-of-america-AI-agents-strategy-compliance/805254) |

## What has Bank of America disclosed or said about AI risks and agents?

| Item | What it says | Who | Date | Sources |
| --- | --- | --- | --- | --- |
| 10-K risk factor | Expanded use of AI 'including emerging third-party AI services and autonomous AI agents' may bring data risk, unpredictable system interactions and AI failure; third-party models give limited visibility into training data | 2025 Form 10-K | February 25, 2026 | [Bank of America (SEC filings)](https://www.sec.gov/Archives/edgar/data/70858/000007085826000157/bac-20251231.htm) |
| 10-Q forward-looking risk | Lists the ability to achieve expected benefits, such as productivity and cost savings, from AI | Q2 2026 Form 10-Q | July 31, 2026 | [Bank of America (SEC filings)](https://www.sec.gov/Archives/edgar/data/70858/000007085826000394/bac-20260630.htm) |
| Agents left to operate | 'This weekend was a lot about the risk in AI, and that largely is around agents just left to operate. We just don't do that.' | Moynihan | September 14, 2026 | [American Banker](https://www.americanbanker.com/news/bofa-and-pnc-respond-to-rising-ai-fears) |
| Assistive agents | 'So much juice to be squeezed right now with assistive agents that are actually working with humans in the loop' | Gopalkrishnan | October 1, 2026 | [Fortune](https://fortune.com/2026/10/01/ai-regulated-industries-bank-of-america-sp-global) |
| Agentic commerce principles | With ASB, Capital One, Commonwealth Bank, ING and NatWest: transparency, safety, privacy and data, choice, interoperability; disclosure when an agent is in a transaction | Bank of America and peers | September 22, 2026 | [Bank of America Newsroom](https://newsroom.bankofamerica.com/content/newsroom/press-releases/2026/09/global-banks-collaborate-on-principles-for-trusted-agentic-comme.html), [CNBC](https://www.cnbc.com/2026/09/22/banks-warn-ai-shopping-bots-raise-scam-fraud-data-privacy-risks.html) |
| Human payment authorization | Working with the AI industry to argue for human payment authorization until agent capabilities develop further | Moynihan, reported by The Verge | October 15, 2026 | [The Verge](https://www.theverge.com/ai-artificial-intelligence/1011767/bank-of-america-wants-a-human-in-the-loop) |
| Frontier-model security | 'That risk is real risk'; 1,000 contractors added to 3,000 staff to patch flaws exposed by Mythos; remediation and AML costs 'a couple hundred million plus' in Q3 | Moynihan | October 14, 2026 | [CNBC](https://www.cnbc.com/2026/10/14/anthropic-mythos-bank-of-america-hiring-cost.html), [The Register](https://www.theregister.com/security/2026/10/15/bank-of-america-had-to-bring-in-1000-contractors-to-patch-all-the-bugs-mythos-identified/5303275) |
| Mythos warning | 'It is a big change in the amount of work that will have to go on and the pace of which these tools will affect vulnerabilities in your systems' | Moynihan | July 16, 2026 | [Bloomberg](https://www.bloomberg.com/news/articles/2026-07-16/bofa-s-moynihan-joins-bank-ceos-warning-about-mythos-ai-risks) |

## What has Bank of America not disclosed about AI governance?

The bank has not published a standalone responsible-AI principles document or the list of its 16 risk dimensions beyond the examples Gopalkrishnan gave. The examples he named, fraud models that disadvantage demographic groups and chatbots that underserve accented speakers, are the bias cases it says the review looks for. ([Fortune](https://fortune.com/2026/10/02/bank-of-america-sp-global-why-ai-success-starts-governance-and-data))

No model inventory, bias-testing results or incident statistics are public; the 10-K refers to internal AI governance frameworks without detail. The October 2026 Treasury, FinCEN and OCC AML penalties of $1.21 billion concern Bank Secrecy Act controls; the releases do not mention AI. ([Bank of America (SEC filings)](https://www.sec.gov/Archives/edgar/data/70858/000007085826000157/bac-20251231.htm), [U.S. Department of the Treasury](https://home.treasury.gov/news/press-releases/sb0657), [Office of the Comptroller of the Currency](https://www.occ.gov/news-issuances/news-releases/2026/nr-occ-2026-89.html))

## What does the BofA profile record on this topic?

| Date | Move | Detail | Sources |
| --- | --- | --- | --- |
| Oct 1, 2026 | CTIO at Fortune AIQ Summit: Orchestra routes work to open-weight or proprietary models | Gopalkrishnan says AI is often rejected in favour of deterministic rules, every project is reviewed against 16 risk pillars, simple classification runs on approved open-weight models on the bank's own GPUs, and agents stay assistive with humans in the loop. He gives Erica's total as 3.6 billion interactions. | [Fortune](https://fortune.com/2026/10/01/ai-regulated-industries-bank-of-america-sp-global) |
| Sep 22, 2026 | Principles for AI shopping agents | With NatWest, ING, Capital One, ASB and Commonwealth Bank, the bank warns AI shopping agents raise scam, fraud and data-privacy risks and proposes disclosure when an agent is in a transaction. | [CNBC](https://www.cnbc.com/2026/09/22/banks-warn-ai-shopping-bots-raise-scam-fraud-data-privacy-risks.html) |
| Sep 14, 2026 | Moynihan on agent risk: 'we just don't do that' | After a weekend of public alarm over autonomous AI agents, the CEO says the bank keeps agents under control rather than 'left to operate'. | [American Banker](https://www.americanbanker.com/news/bofa-and-pnc-respond-to-rising-ai-fears) |
| Jul 31, 2026 | Q2 2026 10-Q: AI benefits listed as a forward-looking risk | The forward-looking-statements list cites 'the ability to achieve expected or potential benefits, such as increased productivity and cost savings' from artificial intelligence; the Q1 10-Q wording was 'potential benefits'. | [Bank of America (SEC filings)](https://www.sec.gov/Archives/edgar/data/70858/000007085826000394/bac-20260630.htm) |
| Jul 16, 2026 | Moynihan on Mythos: 'a big change' | The CEO joins bank chiefs warning that frontier models such as Anthropic's Mythos change how fast system vulnerabilities must be fixed. | [Bloomberg](https://www.bloomberg.com/news/articles/2026-07-16/bofa-s-moynihan-joins-bank-ceos-warning-about-mythos-ai-risks) |
| Feb 25, 2026 | 2025 10-K: autonomous AI agents and third-party models as risks | The annual report says expanded use of AI, 'including emerging third-party AI services and autonomous AI agents', may bring data risk, unpredictable system interactions and AI failure, and notes internal AI governance frameworks. | [Bank of America (SEC filings)](https://www.sec.gov/Archives/edgar/data/70858/000007085826000157/bac-20251231.htm) |

## Common questions

### How does Bank of America review AI projects for risk?

CTIO Hari Gopalkrishnan said in October 2026 that every AI implementation is evaluated across 16 risk dimensions, including privacy, bias, workforce implications and intellectual property, and that guardrails, evaluation and monitoring continue after deployment. He said the bank often chooses deterministic rules instead of AI.

### What does Bank of America's 10-K say about AI?

The 2025 Form 10-K, filed February 25, 2026, says expanded use of AI, including emerging third-party AI services and autonomous AI agents, may bring data risk, unpredictable system interactions and AI failure, notes limited visibility into third-party models' training data, and refers to internal AI governance frameworks.

### Will Bank of America let AI agents make payments?

Not without people. Of agents 'just left to operate', Moynihan said in September 2026 'We just don't do that', and in October said the bank is working with the AI industry to argue for human authorization of agent payments. With five peer banks it published agentic-commerce principles calling for disclosure when an agent is in a transaction.

### How did Anthropic's Mythos affect Bank of America?

The bank was in Anthropic's Glasswing program from the start and tested Mythos internally, per Reuters. Moynihan said in October 2026 that it added 1,000 contractors to 3,000 staff in the second quarter to patch internal and vendor software flaws that frontier models exposed, and expects remediation costs to decline.
## Deeper on BofA

- [What is Bank of America's AI strategy and technology vision?](https://www.bankingnewsai.com/banks/bank-of-america/ai-strategy)
- [What AI research, patents and partnerships does Bank of America have?](https://www.bankingnewsai.com/banks/bank-of-america/ai-research-patents-partnerships)
- [What is Erica, Bank of America's virtual assistant, and how big is it?](https://www.bankingnewsai.com/banks/bank-of-america/virtual-assistant)
- [What technology stack does Bank of America run its AI on?](https://www.bankingnewsai.com/banks/bank-of-america/technology-stack)


---

Canonical page: https://www.bankingnewsai.com/banks/bank-of-america/responsible-ai
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (42 authorities, 243 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.