---
title: "Banks Are Building AI Workforces on Infrastructure They Rent"
slug: "banks-ai-workforces-own-the-infrastructure"
author: "Jaione Amigot"
date: "2026-08-18 11:00:00"
category: "Premium"
topics: "banking ai, kyc, aml, fraud detection, financial services compliance, ai agents, sec finra, self-hosted ai"
summary: "Banks are deploying agents for KYC, compliance, and fraud detection — but Capgemini finds only 10% run them at scale, and most run on infrastructure the bank does not own. Why the second fact explains the first."
banner: ""
thumbnail: ""
linkedin: |
  Banks are building AI "workforces" — agents for KYC, onboarding, compliance, fraud detection.

  Capgemini surveyed 1,100 financial-services leaders across 14 markets. The results are worth sitting with:

  • Only 10% have deployed AI agents at scale
  • 80% are still in ideation or pilot
  • Where they want them most: customer service (75%), fraud detection (64%), loan processing (61%), onboarding (59%)

  Every one of those four touches regulated data. KYC files, transaction histories, adverse-media checks, account records.

  So the question that decides whether a pilot becomes production isn't "does the agent work?" It's "where does the customer data go when it runs, and can we show a regulator the log?"

  Most banks answer that today by trusting a vendor's cloud and a contract. That's a defensible answer for a pilot. It's a harder one at 500 agents touching core systems under SEC, FINRA, SOX and PCI DSS.

  On ibl.ai you own all the code and the data, run it model-agnostic across any LLM, with no per-seat pricing — so agents run inside the bank's own perimeter, and every tool call is logged where your auditors already look.

  #iblai #AgenticAI #EnterpriseAI #Banking #FinTech #Compliance #AI
---

## The Short Answer

**A bank can run AI agents on infrastructure it owns rather than rents. On ibl.ai you own all the code and the data, so KYC files, transaction histories, and customer records are processed inside the bank's own perimeter and every tool call is logged where auditors already look. The platform is model-agnostic and has no per-seat pricing, so you can deploy anywhere, including air-gapped.**

The ambition is now standard. Banks describe AI "workforces" — agents handling know-your-customer checks, onboarding, transaction monitoring, adverse-media screening, and fraud detection.

The delivery is not. Capgemini Research Institute's [World Cloud Report in Financial Services 2026](https://www.capgemini.com/news/press-releases/banks-and-insurers-deploy-ai-agents-to-fight-fraud-and-process-applications-with-plans-for-new-roles-to-supervise-the-ai/), surveying 1,100 leaders across 14 markets, found that **only 10% of financial institutions have deployed AI agents at scale**, while 80% remain in ideation or pilot.

The same research shows where banks most want them: customer service (75%), fraud detection (64%), loan processing (61%), and customer onboarding (59%).

Every one of those four touches regulated customer data. That is not a coincidence, and it is most of the explanation for the 10%.

## Why do bank agent pilots stall before production?

Not because the agents fail. Because the review does.

A fraud-detection agent that reaches production has to answer questions a demo never asks: where does the transaction data go while the agent reasons over it, who else can reach it, how long is it retained, what is logged, and can that log be handed to an examiner.

When the agent runs in a vendor's cloud, each answer is a contractual assurance rather than an architectural fact. That distinction is survivable for a pilot on synthetic data and becomes the sticking point the moment real customer records are involved.

So the pilot works, the risk committee asks where the data goes, and the programme returns to ideation. Ten percent.

## What does SEC, FINRA, SOX, and PCI DSS actually demand of an AI agent?

Not that you avoid AI. That you can evidence control over it.

Under SEC and FINRA supervision obligations, a firm must be able to show what its systems did and why. SOX demands auditable controls over anything touching financial reporting. PCI DSS constrains where cardholder data may be processed at all.

An agent complicates each because it acts without a human in the loop. The reconstruction of what happened is the log, and the log's completeness is a property of the platform, not the model.

This is why the ownership question is a compliance question rather than a philosophical one. If the platform is yours, the audit trail lives beside your existing access logs, retention follows your policy, and there is no third party whose incident response you inherit.

If it is not, you are evidencing someone else's controls.

We worked through the deployment options in detail in [Private AI for Financial Services, on Your Own Servers](/blog/private-ai-for-financial-services-on-your-own-servers) and the vendor comparison in [Self-Hosted AI vs ChatGPT for Financial Services](/resources/comparisons/self-hosted-ai-vs-chatgpt-enterprise-for-financial-services).

## Does an AI workforce make sense under per-seat pricing?

No, and the mismatch is structural rather than a matter of negotiation.

Per-seat licensing — roughly $30 per user per month for Microsoft Copilot, about $60 for ChatGPT Enterprise — prices a human at a keyboard. An AI workforce is by definition not that.

An agent screening transactions overnight occupies no seat, and a bank that wants a hundred of them is not asking for a hundred more employees.

Vertical tools price even more sharply against scale: legal AI has been reported at $300–500 per lawyer per month, which is the same shape applied to a smaller population.

The alternative is to pay for the work rather than the headcount, or to own the platform outright and pay only for the compute.

At a bank with 40,000 staff and an ambition to put agents into four core processes, the pricing model is not a line item — it decides whether the programme is affordable at all. The arithmetic is laid out in [AI Cost Math for Financial Services](/blog/ai-cost-math-for-financial-services-per-seat-vs-usage).

## What should a bank actually own?

Three layers, in order of how hard they are to replace later:

**The data path.** Where KYC files, transaction records, and adverse-media results travel while an agent reasons over them. This is the layer regulators ask about first and the hardest to change after the fact.

**The audit trail.** Every prompt, retrieval, and tool call, in a form an examiner accepts, retained under the bank's own policy.

**The model choice.** Not because any one model is best, but because a bank that cannot change models has accepted a single vendor's pricing, deprecation schedule, and capability curve as a permanent input to a regulated process.

None of that requires building an AI platform from scratch, which is its own multi-year trap. It requires a platform the bank runs and holds the code for. The distinction between owning and renting is set out in [Renting Enterprise AI Costs Far More Than the Invoice](/blog/enterprise-ai-ownership-vs-rental-cost).

## Where does this leave the 90%?

With a solvable problem, and a specific first question.

The banks in the 10% did not find better models. They resolved where the agents run before scaling them, which meant the risk review happened once at the architecture level instead of separately for every use case.

That is the practical sequencing: decide the data path and the audit trail first, then add agents against it. Doing it the other way — proving value in a pilot and negotiating the architecture afterwards — is precisely how eighty percent of a market ends up stuck in ideation.

## Why does owning the AI stack matter?

**ibl.ai is the agentic AI platform where you own all the code and the data. You self-host the entire stack inside your own perimeter, run it model-agnostic across any LLM and switch anytime, and pay by usage with no per-seat pricing — so you can deploy anywhere: your cloud, on-premise, GovCloud, or fully air-gapped.**

- **You own all the code and the data.** Full source code under a perpetual license, running on your infrastructure. Not API access to someone else's platform — the stack itself is yours.
- **Model-agnostic.** Run any LLM — Claude, GPT, Gemini, Llama, Command, or your own fine-tune — and switch providers without rewriting the platform.
- **No per-seat pricing.** Usage-based billing against a budget cap you set. Cost tracks what your organization actually uses, not how many people you employ.
- **Deploy anywhere.** Your cloud, your VPC, on-premise, GovCloud, or a fully air-gapped network with no outbound connectivity.

1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University.

ibl.ai is family-owned and operated from New York, NY — a U.S.-headquartered, domestically-owned long-term partner, not a vendor that sells licenses and moves on.