# Morgan Stanley: Responsible AI

Source: https://www.bankingnewsai.com/banks/morgan-stanley/responsible-ai
Last updated: Oct 31, 2026

*Part of the [Morgan Stanley AI strategy profile](https://www.bankingnewsai.com/banks/morgan-stanley).*

## How does Morgan Stanley govern AI and manage AI risk?

Morgan Stanley's responsible-AI practice is built on testing before deployment and on its existing risk departments, not on a published AI charter. When it put OpenAI's GPT-4 in front of advisors from 2023, it built an evaluation framework that tests every AI use case before release, with advisors and prompt engineers grading summaries and a daily regression suite checking compliance, per OpenAI's December 2024 case study. At board level, the 2026 proxy gives the Operations and Technology Committee oversight of technology strategy 'including trends that may affect such strategy, such as artificial intelligence', and the board held 'deep dives' on AI. Models fall under a Model Risk Management Department inside Risk Management that 'independently validates and approves models for use' and annually recertifies them. For vendors, Madhu Coimbatore, now head of the firmwide AI platform, helped write the FINOS AI governance framework in 2024 and said in June 2026 that the firm uses it in new vendor onboarding. For agents, the design rule is bounded autonomy: the FIXR reconciliation agents keep controllers approving every recommendation, and wealth CIO Hina Shamsi said in October 2026 that agents work within 'clearly defined boundaries'. The 10-K has named generative AI as a source of technology and cyber risk since its 2023 edition. The firm has not published AI principles or an AI-specific audit, and its most recent regulatory record on data is a $35 million SEC penalty in 2022 over customer data on unwiped devices. ([OpenAI](https://openai.com/index/morgan-stanley/), [Morgan Stanley](https://www.morganstanley.com/press-releases/key-milestone-in-innovation-journey-with-openai), [SEC EDGAR](https://www.sec.gov/Archives/edgar/data/895421/000114036126012975/ny20058185x1_def14a.htm), [Morgan Stanley (SEC filing)](https://www.sec.gov/Archives/edgar/data/895421/000089542126000086/ms-20251231.htm), [American Banker](https://www.americanbanker.com/news/banker-led-group-shares-advice-on-gen-ais-hallucinations-other-risks), [FINOS](https://www.finos.org/press/finos-launches-ai-fund), [VentureBeat](https://venturebeat.com/orchestration/morgan-stanley-cut-its-riskiest-reconciliation-job-in-half-by-making-its-agents-less-autonomous), [CIO Dive](https://www.ciodive.com/news/ai-playbook-morgan-stanley-wealth-division/833824/), [SEC EDGAR](https://www.sec.gov/Archives/edgar/data/895421/000089542124000300/ms-20231231.htm), [U.S. Securities and Exchange Commission](https://www.sec.gov/newsroom/press-releases/2022-168))

## Who oversees AI at Morgan Stanley, from the board down?

'Disclosed' is from an SEC filing; 'Stated' is a named executive or a partner's published account.

| Body or role | What it does for AI | Status | Source date | Sources |
| --- | --- | --- | --- | --- |
| Operations and Technology Committee of the board | Oversees operations and technology strategy, including AI as a trend; reviews the technology budget and significant investments; reviews operational risk, including information technology, cybersecurity and third-party oversight, at least quarterly; met 4 times in 2025 | Disclosed | April 1, 2026 | [SEC EDGAR](https://www.sec.gov/Archives/edgar/data/895421/000114036126012975/ny20058185x1_def14a.htm) |
| Full board | 'Deep dives' on technology initiatives, 'including artificial intelligence, and emerging risks'; cybersecurity reporting covers threats from generative AI | Disclosed | April 1, 2026 | [SEC EDGAR](https://www.sec.gov/Archives/edgar/data/895421/000114036126012975/ny20058185x1_def14a.htm) |
| Model Risk Management Department | A distinct department in Risk Management that sets model risk tolerance, provides effective challenge, independently validates and approves models, annually recertifies and periodically revalidates them | Disclosed | February 19, 2026 | [Morgan Stanley (SEC filing)](https://www.sec.gov/Archives/edgar/data/895421/000089542126000086/ms-20251231.htm) |
| Firmwide AI platform | Madhu Coimbatore, head of AI development platforms in 2024 and now head of the firmwide AI platform, holds the firm's seat on the FINOS AI governing board | Stated | October 2024; June 2026 | [American Banker](https://www.americanbanker.com/news/banker-led-group-shares-advice-on-gen-ais-hallucinations-other-risks), [FINOS](https://www.finos.org/press/finos-launches-ai-fund) |
| Evaluation framework | Every AI use case is tested before deployment; summarization and translation evals graded by advisors and prompt engineers; daily regression testing for compliant outputs | Stated | December 6, 2024 | [OpenAI](https://openai.com/index/morgan-stanley/) |
| Agent design in wealth | Agents operate within boundaries on what data they can access, how, what actions they take and when a human steps in; Shamsi: 'I can't stress enough the importance of guardrails, permissions, monitoring and human oversight' | Stated | October 26, 2026 | [CIO Dive](https://www.ciodive.com/news/ai-playbook-morgan-stanley-wealth-division/833824/) |
| Agent design in finance | FIXR's agents propose fixes for P&L breaks; controllers review, approve or correct every recommendation, and repeated decisions become fixed rules; 'You still preserve that element of human accountability' | Stated | June 30, 2026 | [VentureBeat](https://venturebeat.com/orchestration/morgan-stanley-cut-its-riskiest-reconciliation-job-in-half-by-making-its-agents-less-autonomous) |

## What has Morgan Stanley said or disclosed about responsible AI, and when?

| Date | Item | What it says | Sources |
| --- | --- | --- | --- |
| March 14, 2023 | OpenAI partnership | Wealth management becomes one of a handful of GPT-4 launch organizations and OpenAI's only strategic client in wealth management | [Morgan Stanley](https://www.morganstanley.com/press-releases/key-milestone-in-innovation-journey-with-openai) |
| February 22, 2024 | 2023 10-K | Information security risks 'may be heightened by... reliance on new technologies (such as generative artificial intelligence)'; risk management may not adapt as new technologies such as AI are introduced | [SEC EDGAR](https://www.sec.gov/Archives/edgar/data/895421/000089542124000300/ms-20231231.htm) |
| October 11, 2024 | FINOS AI Readiness Governance Framework | Co-authored with Citi and LSEG; 14 kinds of generative AI threats; the firm already used the draft 'as a set of requirements for data security, privacy, cybersecurity, AI safety and model management' given to employees and vendors | [American Banker](https://www.americanbanker.com/news/banker-led-group-shares-advice-on-gen-ais-hallucinations-other-risks) |
| December 6, 2024 | OpenAI case study | From 7,000 answerable questions to 'any question from a corpus of 100,000 documents'; more than 98% of advisor teams use the Assistant | [OpenAI](https://openai.com/index/morgan-stanley/) |
| February 19, 2026 | 2025 10-K | Adds AI and tokenization to laws and regulations the firm must track, and to the technologies risk management may not adapt to | [Morgan Stanley (SEC filing)](https://www.sec.gov/Archives/edgar/data/895421/000089542126000086/ms-20251231.htm) |
| June 23, 2026 | FINOS AI Fund | Founding premier member; Coimbatore: 'we actively leverage the FINOS AI Governance Framework in new vendor onboarding' | [FINOS](https://www.finos.org/press/finos-launches-ai-fund) |

## What is Morgan Stanley's regulatory record on data, and how does it bear on AI?

On September 20, 2022 the SEC fined Morgan Stanley Smith Barney $35 million for failing, over five years, to protect personal information of about 15 million customers: a moving company with no data-destruction expertise decommissioned thousands of hard drives and servers, some later resold online with unencrypted data. The 10-K still cites human error that 'has led to the loss of the Firm's physical data-bearing devices in the past'. ([U.S. Securities and Exchange Commission](https://www.sec.gov/newsroom/press-releases/2022-168), [Morgan Stanley (SEC filing)](https://www.sec.gov/Archives/edgar/data/895421/000089542126000086/ms-20251231.htm))

The firm's generative AI concerns, as Coimbatore described them in 2024, start with the same issue: data security can be breached 'through a prompt injection attack, or the loss of data from a vector database or a proprietary model', which he said calls for defense in depth, encryption and role-based access. No enforcement action against Morgan Stanley has concerned AI. ([American Banker](https://www.americanbanker.com/news/banker-led-group-shares-advice-on-gen-ais-hallucinations-other-risks))

## What does the Morgan Stanley profile record on this topic?

| Date | Move | Detail | Sources |
| --- | --- | --- | --- |
| Jun 30, 2026 | FIXR: agentic P&L reconciliation cuts the job in half | Three cooperating agents interpret past guidance, learn from controller behaviour and turn repeated patterns into fixed rules; up to six hours per book becomes two to three, about 1,500 hours a week across roughly 100 controllers. | [VentureBeat](https://venturebeat.com/orchestration/morgan-stanley-cut-its-riskiest-reconciliation-job-in-half-by-making-its-agents-less-autonomous) |
| Jun 23, 2026 | Founding premier member of the FINOS AI Fund | With DTCC, RBC and NatWest; Coimbatore says the firm uses the FINOS AI Governance Framework in new vendor onboarding. | [FINOS](https://www.finos.org/press/finos-launches-ai-fund) |
| Apr 15, 2026 | Pick: AI is a 'productivity phenomenon'; Mythos in beta | On the Q1 call the CEO says the firm is using a beta of Anthropic's Mythos model. | [American Banker](https://www.americanbanker.com/news/ai-is-our-friend-bank-ceos-play-down-risks-from-mythos) |
| Jan 15, 2026 | Q4 2025 call: growth plans 'embed' AI; LeadIQ on the revenue side | LeadIQ uses AI to introduce advisors to interested clients; in operations 'we now have one human team and one AI team'. | [The Motley Fool (Yahoo Finance)](https://finance.yahoo.com/news/morgan-stanley-ms-q4-2025-150422206.html) |
| Aug 15, 2025 | Calm, the firm's architecture-as-code tool, open-sourced through FINOS | Already underpinning well over 2,000 application deployments across firms and more than 1,400 internally; Morgan Stanley, BMO, Citi and RBC joined a June 2025 FINOS effort on vendor-neutral AI adoption standards. | [Banking Dive](https://www.bankingdive.com/news/morgan-stanley-open-source-software-development-finos-calm/758406/) |
| Jul 15, 2025 | Patent granted on LLM conversion of legacy code | US 12,360,791, assigned to Morgan Stanley Services Group: converting a legacy program into a human-language description that can be validated and then rewritten; priority May 2024. | [Google Patents (USPTO)](https://patents.google.com/patent/US12360791B1/en) |
| May 20, 2025 | Bots do the 'boring compliance work' | Task automation in non-financial risk; 'capacity creation' as the operating doctrine. | [American Banker](https://www.americanbanker.com/news/why-morgan-stanley-lets-bots-do-the-boring-compliance-work) |
| Mar 14, 2024 | Jeff McMillan appointed the firm's first head of firmwide AI | A newly created role 'to ensure the appropriate AI strategy and governance are in place'; McMillan had been chief data and analytics officer; five generative-AI use-case buckets: search, summarisation, interpretation, generating solutions and translation across 53 languages. | [Bank Automation News](https://bankautomationnews.com/banking/5-questions-with-morgan-stanley-head-of-ai-jeff-mcmillan/) |

## Common questions

### Does Morgan Stanley have responsible AI principles?

It has not published a standalone AI principles document. Its stated practice is evaluation before deployment (every use case tested, with daily regression suites), model validation by its Model Risk Management Department, board oversight through the Operations and Technology Committee, the FINOS AI governance framework for vendors, and agents built with humans approving actions. Wealth CIO Hina Shamsi summarized it in October 2026 as 'guardrails, permissions, monitoring and human oversight'.

### How does Morgan Stanley test AI before using it?

Through evals. OpenAI's December 2024 case study describes Morgan Stanley testing every AI use case before deployment: summarization evals graded by advisors and prompt engineers, translation evals for multilingual clients, evaluation datasets of meeting types for the Debrief note-taker, and a daily regression suite of sample questions to catch non-compliant outputs.

### Who oversees AI on Morgan Stanley's board?

The Operations and Technology Committee, chaired by Jami Miscik, oversees the firm's operations and technology strategy including AI, reviews the technology budget and reviews operational risks such as cybersecurity and third-party oversight at least quarterly; it met four times in 2025. The full board also held deep dives on technology initiatives including AI.

### How does Morgan Stanley control AI vendors?

By applying the FINOS AI governance framework, which its head of firmwide AI platform Madhu Coimbatore helped write in 2024, to new vendor onboarding. In 2024 he said the draft was already used as requirements for data security, privacy, cybersecurity, AI safety and model management given to employees and vendors, and that many controls must be built in by technology providers.

### Are Morgan Stanley's AI agents autonomous?

Deliberately not fully. The FIXR agents that reconcile trading P&L propose fixes that controllers review, approve or correct, and only repeated decisions become automatic rules; the work fell from up to six hours per book to two or three. In wealth management, agents that move money or change beneficiaries for service associates run within defined boundaries on data access, actions and when a human must step in.
## Deeper on Morgan Stanley

- [How does Morgan Stanley use AI in wealth management?](https://www.bankingnewsai.com/banks/morgan-stanley/wealth-management-ai)
- [What is Morgan Stanley's AI strategy?](https://www.bankingnewsai.com/banks/morgan-stanley/ai-strategy)
- [What AI partnerships, patents and investments does Morgan Stanley have?](https://www.bankingnewsai.com/banks/morgan-stanley/ai-research-patents-partnerships)
- [What technology stack does Morgan Stanley run, and how is AI built on it?](https://www.bankingnewsai.com/banks/morgan-stanley/technology-stack)
- [How is AI changing Morgan Stanley's workforce?](https://www.bankingnewsai.com/banks/morgan-stanley/ai-workforce)


---

Canonical page: https://www.bankingnewsai.com/banks/morgan-stanley/responsible-ai
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (45 authorities, 260 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.