ENBANK TECHNOLOGY, RISK MANAGEMENT & CREDIT OPERATIONS · NOVEMBER 5, 2026
OCC Issues Risk-Based Framework for Banks’ Use of Advanced Intelligence
The OCC issued an examiner framework for bank use of “super intelligence,” directing supervisory work toward the materiality, consequences, autonomy, and human oversight of each use case rather than creating a separate risk category.
What the OCC issued
Source publication date: November 4, 2026. The OCC published a supervisory framework to help examiners evaluate national banks’, federal savings associations’, and federal branches’ use of technologies it calls super intelligence and agentic super intelligence in normal-course activities. The bulletin says the framework is an examiner resource, not a new set of enforceable standards or prescriptive supervisory expectations for banks.
- 01No separate risk category is required
- 02Control intensity can rise with consequences
- 03Human oversight and agency transfer matter
Examination should follow materiality and potential consequence
The OCC instructed examiners to tailor work to the materiality of the use case and, for community banks, to the institution’s size, complexity, and risk profile. The framework can supplement existing model-risk, governance, technology, compliance, and operational-risk practices. Examiners should not treat the technology as a separate risk category, and banks are not required to create a separate risk appetite solely for it.
Autonomy and human oversight influence control intensity
The OCC says a bank’s risk classification may consider potential consequences, transfer of agency, and degree of human oversight rather than technical sophistication alone. Control intensity may increase when failure or misuse could produce greater harm. The framework does not state that a particular automated process is accurate, unbiased, secure, legally compliant, or appropriate for a specific credit decision.
Practical borrower and investor takeaway
Keep source documents internally consistent and preserve the versions, dates, calculations, authorizations, and communications used in a financing request. Confirm account and payment instructions through approved contacts, protect credentials, review automated outputs for obvious errors, and request documented human escalation when facts are misunderstood. Investors evaluating banks or technology vendors should examine governance, data lineage, validation, access, incident response, third-party dependencies, customer remediation, and the consequences of autonomous actions.
Borrowers and investors should expect technology to influence bank intake, underwriting, fraud controls, servicing, and operations while continuing to preserve complete records, verify decisions, protect credentials, and escalate errors through documented human channels.
Discuss a financing need →This independent summary is based on the cited source and is provided for general educational purposes only. Terms and program requirements may change.