# Truist Financial: Responsible AI

Source: https://www.bankingnewsai.com/banks/truist/responsible-ai
Last updated: Oct 16, 2026

*Part of the [Truist Financial AI strategy profile](https://www.bankingnewsai.com/banks/truist).*

## How does Truist govern AI responsibly?

Truist says its AI programme is 'foundationally based on the National Institute of Standards and Technology AI Risk Management Framework Core', and that oversight of it is a regular focus of the board, the Risk Committee and the Technology Committee (2025 10-K, February 2026; 2026 proxy, March 2026). The proxy, which added an AI spotlight after shareholders raised AI in 2025 engagement meetings, says the board receives reports on AI policies and procedures, results and emerging opportunities, plus educational sessions on AI strategy and risk. The 10-K carries a dedicated AI risk factor on flawed, biased or degraded models and failing third-party AI services, and warns that AI makes fraud harder to detect and may widen the cyber-attack surface. In practice, the bank trains a challenger model alongside each production model and monitors outputs against thresholds in near real time, and every deployment needs a defined return. Chandra Kapireddy, then head of generative AI, ML and analytics, said in April 2025 that his group drives AI policy and that SR 11-7 model-risk principles still apply to generative AI. Agents are governed like staff: Hagerman's digital teammates get boundaries and corrective-action plans. Truist has no published AI principles document or named AI ethics board. ([Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm), [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000119312526107144/d12240ddef14a.htm), [American Banker](https://www.americanbanker.com/news/how-truist-and-western-alliance-deploy-ai-to-fight-fraud), [MIT Sloan Management Review](https://sloanreview.mit.edu/audio/overcoming-ai-hallucinations-truists-chandra-kapireddy), [American Banker](https://www.americanbanker.com/news/the-truist-cio-is-34-on-the-most-innovative-people-in-finance-ranking))

## Which bodies and frameworks govern AI at Truist?

Each element as the cited document describes it.

| Element | What it says | Where | Date | Sources |
| --- | --- | --- | --- | --- |
| NIST AI RMF Core | Truist's AI program is 'foundationally based' on the NIST AI Risk Management Framework Core, which 'enable[s] dialogue, understanding, and activities to manage AI risks and develop trustworthy AI systems' | 2025 10-K; 2026 proxy | February-March 2026 | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm), [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000119312526107144/d12240ddef14a.htm) |
| Board, Risk Committee, Technology Committee | Oversight of the AI program is 'a regular focus' of the board and the joint Risk and Technology Committees of Truist Financial and Truist Bank | 2025 10-K; 2026 proxy | February-March 2026 | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm), [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000119312526107144/d12240ddef14a.htm) |
| Board reporting and education | The board receives reports on AI policies and procedures, results and emerging opportunities, and educational sessions on trends, competitive impact, strategy and risk management | 2026 proxy | March 16, 2026 | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000119312526107144/d12240ddef14a.htm) |
| Shareholder engagement | Investors raised AI in 2025 meetings; Truist added disclosure on the board's oversight of AI in response | 2026 proxy | March 16, 2026 | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000119312526107144/d12240ddef14a.htm) |
| AI strategy and policy owner | Chandra Kapireddy's group sets AI strategy and AI policy and builds the platforms model risk management teams use | MIT Sloan Management Review | April 15, 2025 | [MIT Sloan Management Review](https://sloanreview.mit.edu/audio/overcoming-ai-hallucinations-truists-chandra-kapireddy) |
| Champion-challenger monitoring | A discovery model is trained alongside each production model; outputs are monitored against thresholds in near real time; each deployment needs a defined return on investment | American Banker | June 4, 2025 | [American Banker](https://www.americanbanker.com/news/how-truist-and-western-alliance-deploy-ai-to-fight-fraud) |
| Agent lifecycle | Digital teammates are hired, trained, promoted by success rate, put on corrective action when they exceed boundaries, and retired | American Banker | June 1, 2026 | [American Banker](https://www.americanbanker.com/news/the-truist-cio-is-34-on-the-most-innovative-people-in-finance-ranking) |
| Leader and board training | Hands-on AI training for the top 1,200 leaders plus the board; a board programme on AI ethics and governance in design | American Banker | June 1, 2026 | [American Banker](https://www.americanbanker.com/news/the-truist-cio-is-34-on-the-most-innovative-people-in-finance-ranking) |

## Which AI risks does Truist name in its filings?

| Risk | What the filing says | Filing | Sources |
| --- | --- | --- | --- |
| Model quality and bias | AI models may be flawed, biased or degrade; outputs may be inaccurate | 2025 10-K | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm) |
| Third-party AI | Third-party AI services may fail, degrade or return inaccurate outputs | 2025 10-K | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm) |
| Fraud and cyber | AI makes fraud harder to detect and identity fraud likelier; AI-enabled technology may widen the attack surface through adversarial manipulation and data poisoning | 2025 10-K | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm) |
| Workforce | Automation and AI 'may lead us to modify our workforce strategy', requiring more training and competition for technical talent | 2025 10-K | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm) |
| AI-driven cyberattacks | Added to the forward-looking risk list in the second-quarter 2026 10-Q | Q2 2026 10-Q | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000099/tfc-20260630.htm) |

## What have Truist's AI leaders said about bias, hallucination and oversight?

Kapireddy: 'every GenAI model hallucinates'; the question is the degree of uncertainty. He told MIT Sloan Management Review that generative AI's flexibility makes validation harder than for a single-purpose credit model, that human oversight matters most in high-stakes decisions, and that SR 11-7 remains intact for model risk management alongside the NIST framework. ([MIT Sloan Management Review](https://sloanreview.mit.edu/audio/overcoming-ai-hallucinations-truists-chandra-kapireddy))

Mazzaferro, then chief data, AI and analytics officer: 'I have never seen a model that has no bias, ever.' He preferred vendor fraud models trained across several banks to models trained only on Truist data. ([American Banker](https://www.americanbanker.com/news/how-truist-and-western-alliance-deploy-ai-to-fight-fraud))

The bank's own agentic-AI patent application describes role-based access controls and selectable metadata 'for establishing guardrails for the agentic LLM'. Enterprise payments head Chris Ward said in June 2026: "It's not going to be a 'just let the agents rip' kind of thing." ([Google Patents (USPTO)](https://patents.google.com/patent/US20260095461A1/en), [American Banker](https://www.americanbanker.com/payments/news/banks-arent-ready-for-ai-agents-moving-money-experts-warn))

AI Call Summaries are described as 'one of Truist's earliest enterprise-scale generative AI applications approved for broad use', reflecting a commitment to 'scaling AI responsibly'. Not disclosed: a published set of AI principles, an AI ethics committee, or a count of models under review. ([Truist](https://ir.truist.com/2026-09-09-Truist-advances-AI-to-create-more-meaningful-client-interactions))

## What does the Truist profile record on this topic?

| Date | Move | Detail | Sources |
| --- | --- | --- | --- |
| Jul 31, 2026 | 10-Q adds 'AI-driven cyberattacks' to the risk list | The second-quarter 10-Q lists AI-driven cyberattacks among the forward-looking risks and keeps the ability to keep pace with AI-related products and intellectual property; the 10-K list had the AI product item but not the AI-driven cyberattack wording. | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000099/tfc-20260630.htm), [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm) |
| Feb 24, 2026 | 10-K: AI and the workforce, fraud and cyber risk | Beyond the AI risk factor, the 10-K says automation and AI may lead Truist to modify its workforce strategy, warns that AI makes fraud harder to detect and identity fraud likelier, and says AI-enabled technologies may widen the cyber-attack surface through adversarial manipulation and data poisoning. | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm) |
| Feb 24, 2026 | 10-K: a dedicated AI risk factor and a NIST-based AI program | The 2025 annual report lists AI use in marketing, service, code development and fraud identification, warns of flawed or biased models and failing third-party AI services, and says the AI program is based on the NIST AI Risk Management Framework under board oversight. | [Truist Financial (SEC filing)](https://www.sec.gov/Archives/edgar/data/92230/000009223026000030/tfc-20251231.htm) |

## Common questions

### Does Truist follow the NIST AI Risk Management Framework?

Yes. Both the 2025 10-K and the 2026 proxy say Truist's AI program is 'foundationally based on the National Institute of Standards and Technology AI Risk Management Framework Core'. Its cybersecurity framework separately builds on the Cyber Risk Institute profile of the NIST Cybersecurity Framework.

### Who oversees AI at Truist's board?

The full board, the Risk Committee and the Technology Committee, which are joint committees of Truist Financial and Truist Bank. Per the 2026 proxy, the board receives reports on AI policies and procedures, results and opportunities, and attends educational sessions on AI trends, strategy and risk management.

### What AI risks does Truist disclose?

The 2025 10-K names flawed, biased or degrading models, failing third-party AI services, AI-enabled fraud and identity fraud, a wider cyber-attack surface through adversarial manipulation and data poisoning, and possible changes to its workforce strategy. The Q2 2026 10-Q added 'AI-driven cyberattacks' to its forward-looking risks.

### How does Truist control model risk in AI?

Truist trains a challenger model alongside each production model so that an alternative exists if the deployed one misbehaves, monitors outputs against thresholds in near real time and requires a defined return on investment for each deployment. Its head of generative AI said in April 2025 that SR 11-7 still governs model risk.

### Does Truist have AI ethics principles?

Truist has not published a standalone set of AI principles or named an AI ethics board. It describes its approach through the NIST-based AI program in its filings, board oversight in the proxy, and, per CIO Steve Hagerman, a board programme on AI ethics and governance that was in design in June 2026.
## Deeper on Truist

- [What is Truist's AI strategy?](https://www.bankingnewsai.com/banks/truist/ai-strategy)
- [What AI research, patents and partnerships does Truist have?](https://www.bankingnewsai.com/banks/truist/ai-research-patents-partnerships)
- [What is Truist Assist, and how much is it used?](https://www.bankingnewsai.com/banks/truist/virtual-assistant)


---

Canonical page: https://www.bankingnewsai.com/banks/truist/responsible-ai
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (42 authorities, 243 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.