tickdelta
Sign in

Tickdelta is free for now. Sign up and get Pro free

Artificial intelligence

266 of 521 companies added a paragraph in Risk Factors that uses one of these words: AI, artificial intelligence, machine learning, generative, large language model. The paragraph is in the latest 10-K and nothing like it was in the one before. It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.

By sector

Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.

SectorCompaniesCompared
Orthopedic, Prosthetic & Surgical Appliances & Supplies55
Services-Consumer Credit Reporting, Collection Agencies33
Computer Peripheral Equipment, NEC22
Men's & Boys' Furnishgs, Work Clothg, & Allied Garments22
Retail-Catalog & Mail-Order Houses22
Rubber & Plastics Footwear22
Services-Medical Laboratories22
Transportation Services22
Air Courier Services11
Aircraft & Parts11
Apparel & Other Finishd Prods of Fabrics & Similar Matl11
Bottled & Canned Soft Drinks & Carbonated Waters11
Communications Equipment, NEC11
Drawing & Insulating of Nonferrous Wire11
Electrical Industrial Apparatus11
Electromedical & Electrotherapeutic Apparatus11
Electronic Components & Accessories11
Engines & Turbines11
Farm Machinery & Equipment11
Games, Toys & Children's Vehicles (No Dolls & Bicycles)11
Gas & Other Services Combined11
General Industrial Machinery & Equipment, NEC11
Grain Mill Products11
Heavy Construction Other Than Bldg Const - Contractors11
Insurance Carriers, NEC11
Leather & Leather Products11
Meat Packing Plants11
Misc Industrial & Commercial Machinery & Equipment11
Miscellaneous Manufacturing Industries11
Motors & Generators11
Newspapers: Publishing or Publishing & Printing11
Oil & Gas Field Machinery & Equipment11
Ordnance & Accessories, (No Vehicles/Guided Missiles)11
Paints, Varnishes, Lacquers, Enamels & Allied Prods11
Paper Mills11
Real Estate11
Retail-Computer & Computer Software Stores11
Retail-Drug Stores and Proprietary Stores11
Retail-Eating & Drinking Places11
Retail-Grocery Stores11
Retail-Home Furniture, Furnishings & Equipment Stores11
Retail-Radio, Tv & Consumer Electronics Stores11
Retail-Retail Stores, NEC11
Rolling Drawing & Extruding of Nonferrous Metals11
Services-Advertising Agencies11
Services-Detective, Guard & Armored Car Services11
Services-Engineering, Accounting, Research, Management11
Services-Equipment Rental & Leasing, NEC11
Services-Misc Health & Allied Services, NEC11
Special Industry Machinery (No Metalworking Machinery)11
Special Industry Machinery, NEC11
Sugar & Confectionery Products11
Telephone & Telegraph Apparatus11
Television Broadcasting Stations11
Trucking & Courier Services (No Air)11
Wholesale-Electronic Parts & Equipment, NEC11
Wholesale-Medical, Dental & Hospital Equipment & Supplies11
X-Ray Apparatus & Tubes & Related Irradiation Apparatus11
Computer Storage Devices45
Services-Computer Programming, Data Processing, Etc.45
Investment Advice68
Retail-Eating Places34
Services-Prepackaged Software1419
Finance Services2028
Surgical & Medical Instruments & Apparatus710
Semiconductors & Related Devices1015
Insurance Agents, Brokers & Service46
Electronic Computers23
Measuring & Controlling Devices, NEC23
Retail-Auto Dealers & Gasoline Stations23
Retail-Building Materials, Hardware, Garden Supply23
Services-Commercial Physical & Biological Research23
Services-Computer Integrated Systems Design23
Wholesale-Drugs, Proprietaries & Druggists' Sundries23
National Commercial Banks711
Hospital & Medical Service Plans35
Industrial Instruments For Measurement, Display, and Control35
Laboratory Analytical Instruments35
Services-Business Services, NEC916
Real Estate Investment Trusts1527
Electric Services815
Electronic & Other Electrical Equipment (No Computer Equip)24
Search, Detection, Navigation, Guidance, Aeronautical Sys24
Services-Computer Processing & Data Preparation24
Aircraft Engines & Engine Parts12
Arrangement of Transportation of Freight & Cargo12
Cigarettes12
Cutlery, Handtools & General Hardware12
Fats & Oils12
Industrial Organic Chemicals12
Instruments For Meas & Testing of Electricity & Elec Signals12
Optical Instruments & Lenses12
Paperboard Containers & Boxes12
Printed Circuit Boards12
Pumps & Pumping Equipment12
Radio & Tv Broadcasting & Communications Equipment12
Retail-Auto & Home Supply Stores12
Services-Computer Programming Services12
Services-General Medical & Surgical Hospitals, NEC12
Services-To Dwellings & Other Buildings12
Telephone Communications (No Radiotelephone)12
Trucking (No Local)12
Wholesale-Groceries & Related Products12
Pharmaceutical Preparations511
Crude Petroleum & Natural Gas37
Electric & Other Services Combined512
Retail-Variety Stores25
Air Transportation, Scheduled13
Computer & office Equipment13
Computer Communications Equipment13
Electrical Work13
General Industrial Machinery & Equipment13
Life Insurance13
Perfumes, Cosmetics & Other Toilet Preparations13
Plastic Materials, Synth Resins & Nonvulcan Elastomers13
Soap, Detergents, Cleang Preparations, Perfumes, Cosmetics13
Water Transportation13
Security Brokers, Dealers & Flotation Companies27
Fire, Marine & Casualty Insurance312
Motor Vehicles & Passenger Car Bodies14
Security & Commodity Brokers, Dealers, Exchanges & Services14
Beverages15
Biological Products, (No Diagnostic Substances)15
Hotels & Motels15
Petroleum Refining16
State Commercial Banks16

835 paragraphs · National Commercial Banks show all sectors

BAC BANK OF AMERICA CORP /DE/ · National Commercial Banks

We use, and expect to increasingly use, emerging technologies, including AI, across our operations, including business processes, services and products, and we expect greater AI adoption by our third parties, clients, counterparties, clearinghouses and financial intermediaries. Expanded use of AI, including emerging third‑party AI services and autonomous AI agents, may result in increased data risk, unpredictable system interactions, inadequate controls or safeguards, AI failure, or produce unintended operations or consequences. AI services used by our clients or third parties may interact with our systems or communicate directly with our employees, and may act without authorization, make execution errors, behave unpredictably or be misaligned with intended outcomes, which could result in additional operational, legal and regulatory risk, and reputational harm.

Read in the 10-K filed Feb 25, 2026 ↗

Emerging technologies, such as AI and quantum computing, are expected to increase these risks. For example, AI lowers the entry barriers to plan and execute cyberattacks, enables more personalized and harder to detect social engineering, and improves vulnerability discovery, which may result in the increased likelihood of exploitation and the speed, scope, scale, and sophistication of cyberattacks. Advances in quantum computing may introduce cryptography risks that threaten the

Read in the 10-K filed Feb 25, 2026 ↗
C CITIGROUP INC · National Commercial Banks

The Development and Use of AI by Citi and Others Present Risks to Citi’s Businesses.

Read in the 10-K filed Feb 20, 2026 ↗

Citi has used AI and machine learning tools for many years and has more recently begun to broadly deploy Generative AI, including within its technology platforms and services. In the future, Citi expects to more broadly integrate Generative AI tools within its systems, businesses and functions, including advanced AI capabilities, such as autonomous agents and sophisticated user interactions, which if improperly managed, could result in increased risks and costs.

Read in the 10-K filed Feb 20, 2026 ↗

While Citi has policies that govern the use of emerging technologies, including in model risk management, ineffective, inadequate or faulty Generative AI development or deployment practices by Citi or third parties, including insufficient testing and monitoring, poorly structured or manipulated prompts or insufficient or inadequate human oversight, could result in adverse consequences, such as AI algorithms that produce inaccurate or incomplete output or output based on biased, incomplete and/or inaccurate datasets, infringe on intellectual property rights of others, involve data exfiltration risks, including release of confidential or proprietary information, or cause other issues, concerns or deficiencies. The complexity of AI models, particularly Generative AI models, can make it challenging to understand why particular outputs are generated, which can increase the risk of erroneous and/or biased output and complying with regulations requiring documentation, explainability or auditability on the basis of AI-influenced decisions.

Read in the 10-K filed Feb 20, 2026 ↗

Citi may also rely on AI models developed by third parties and be exposed to risks arising from their development and training methods, including potential inclusion of unauthorized material in the training data or limitations in their risk mitigation strategies, over which Citi may have limited visibility or control (see also the operational processes and systems risk factor below). While Citi may provide restrictions on use of certain data in third-party AI applications or models, a third party could breach those terms, which could expose Citi to legal and reputations risks. Citi is also exposed to risks related to the use of AI technologies by counterparties, clients and vendors, where interconnected AI systems could amplify failures and threats of cyber infiltration, as well as cause widespread disruptions.

Read in the 10-K filed Feb 20, 2026 ↗

Moreover, the use of increasingly sophisticated AI technologies by malicious actors and others has increased the risk of fraud, including identity theft and bypassing of verification controls, and exposure to cyberattacks (see the cybersecurity risk factor below), as well as disinformation and market manipulation campaigns, and failure to effectively manage such risks could result in misappropriation of funds, unauthorized transactions, exposure of sensitive client or Company information, reputational harm and increased litigation and regulatory risk.

Read in the 10-K filed Feb 20, 2026 ↗

Citi also faces competition risks to the extent that competitors may be faster and more successful in developing and deploying AI technologies to improve processes, productivity, efficiency, products and services, and thereby gain competitive advantages over Citi (see the competition risk factor above).

Read in the 10-K filed Feb 20, 2026 ↗

In addition, compliance with new or changing laws, regulations or industry standards relating to AI may impose additional operational risks and costs. Failure to sufficiently manage these risks could expose Citi to adverse legal, regulatory or reputational consequences.

Read in the 10-K filed Feb 20, 2026 ↗
COF CAPITAL ONE FINANCIAL CORP · National Commercial Banks

However, there are significant risks involved in using models and AI, and we cannot assure that our use will enhance our businesses or produce only the intended or beneficial results. For example, generative AI has been known to produce false or “hallucinatory” inferences or output. Certain generative AI tools use machine learning and predictive analytics, which can create inaccurate, incomplete or misleading outputs; unexpected results; or errors or inadequacies, any of which may not be easily detectable. In addition, models and AI that are based on historical data sets might not be accurate predictors of future outcomes. The ability of models and AI to appropriately predict future outcomes may degrade over time due to limited historical patterns, extreme or unanticipated market movements, or customer behavior and liquidity, especially during severe market downturns or stress events (e.g., geopolitical or pandemic events). Consequently, our use of models and AI could result in inaccurate forecasts, ineffective risk management practices, inaccurate risk reporting and other negative or unexpected consequences.

Read in the 10-K filed Feb 19, 2026 ↗

While we continuously update our policies, programs, processes and risk management practices, many of our data management, modeling, AI, aggregation and implementation processes are manual. They may be subject to human error, data limitations, process delays or system failure. If any of our employees, contractors, third-party service providers or other third parties with which we do business use any third-party AI solutions in connection with our business, it may lead to the inadvertent or unauthorized disclosure or incorporation of our sensitive and confidential information, including personal information, into third-party systems or publicly available or third-party training sets, which may impact our ability to realize the benefit of our intellectual property or other proprietary rights in such information. Failure to manage data effectively and to aggregate data in an accurate and timely manner may limit our ability to manage current and emerging risks; to produce accurate financial, regulatory and operational reporting; and to manage changing business needs. If our Framework is ineffective, we could suffer unexpected losses, which could materially adversely affect our results of operation or financial condition.

Read in the 10-K filed Feb 19, 2026 ↗

Any information we provide to the public or to our regulators based on incorrectly designed/implemented models or AI could be inaccurate or misleading. Some of the decisions that our regulators make could be adversely affected if their perception is that the quality of the data, models and AI used to generate the information is insufficient.

Read in the 10-K filed Feb 19, 2026 ↗

The regulation of AI is rapidly evolving worldwide as legislators and regulators are increasingly focused on these powerful, emerging technologies. The technologies underlying AI and its uses are subject to a variety of laws and regulations, including intellectual property, privacy, data protection and data security, consumer protection, competition and equal opportunity laws and regulations. They are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations.

Read in the 10-K filed Feb 19, 2026 ↗

Various U.S. governmental and regulatory agencies continue to review AI. Several U.S. states and foreign jurisdictions are applying (or are considering applying) their platform moderation, privacy, data protection, and data security laws and regulations to AI. They are also considering general legal frameworks for AI. In particular, several states, including Colorado and California, have passed or are continuing to propose laws and regulations that govern various facets and uses of AI.

Read in the 10-K filed Feb 19, 2026 ↗

We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational, competitive or technological risks that may arise from using AI.

Read in the 10-K filed Feb 19, 2026 ↗

Emerging generative AI capabilities, such as synthetic video, images and identity documents may introduce new risks, in the form of identity fraud and scams. Additionally, the growth of agentic commerce, in which autonomous AI agents initiate and execute transactions on behalf of users, may increase fraud losses as well as change circumstances when the merchant or issuer is liable for fraud losses.

Read in the 10-K filed Feb 19, 2026 ↗

Legal frameworks governing such autonomous agents remain nascent, with limited direct guidance, and the interplay between laws and regulations relating to, among other things, fraud, payments, privacy, data protection, data security and AI may create uncertainty around compliance obligations and potential liability exposure as more participants (including sellers, fintechs, AI developers and enablers) enter the agentic commerce ecosystem.

Read in the 10-K filed Feb 19, 2026 ↗

In addition, if we are unable to maintain sufficient network functionality to be competitive with other networks, or if our competitors develop better data security solutions or more innovative products and services than we do, our ability to retain and attract Network Partners and maintain or increase the revenues generated by the Global Payment Network or our proprietary card-issuing businesses could be materially and adversely affected. Our competitive position could also be affected if we are unable to deploy, in a cost-effective and competitive manner, technology such as generative AI. Additionally, competitors may develop ancillary products, which as a consequence of the competitors’ size and scale, we may be forced to use. Such developments could adversely affect our business, as those competitors may be better positioned to absorb the costs of such data security solutions over higher volumes or a larger customer base.

Read in the 10-K filed Feb 19, 2026 ↗

In addition, advances in technology, such as automation and AI, may lead to workforce evolution. This could require us to invest in additional employee training, manage impacts on morale and retention, and compete for employment candidates who possess more advanced technological skills, all of which could have a negative impact on our business and operations.

Read in the 10-K filed Feb 19, 2026 ↗
JPM JPMORGAN CHASE & CO · National Commercial Banks

•appropriately balance workforce planning and training as new technologies, such as AI, are adopted and integrated, or

Read in the 10-K filed Feb 13, 2026 ↗

JPMorganChase’s operations, results, and competitive standing could be adversely affected by the development of advanced technologies such as AI.

Read in the 10-K filed Feb 13, 2026 ↗

The rapid development and deployment of advanced technologies, including generative and agentic AI systems, present a range of risks to JPMorganChase’s businesses and operations, including:

Read in the 10-K filed Feb 13, 2026 ↗

•AI system failures, inappropriate use of AI systems, lack of transparency in AI systems, or inaccurate or biased output from AI systems resulting from rapid deployment, insufficient testing, erroneous data, ineffective model design or insufficient controls, which could disrupt operations, cause erroneous transactions, compromise data privacy, infringe on intellectual property, harm clients and customers, or impair JPMorganChase’s ability to make sound business decisions

Read in the 10-K filed Feb 13, 2026 ↗

•increased exposure to cyber attacks, system manipulation, or data loss if AI systems, particularly agentic systems, are not designed and implemented with appropriate safeguards to prevent systems from accessing sensitive data sources or system resources and taking actions

Read in the 10-K filed Feb 13, 2026 ↗

•intensified AI-enabled cyber threats, which may allow malicious actors to exploit vulnerabilities, reverse-engineer security patches, and conduct sophisticated social engineering attacks, potentially resulting in unauthorized access to sensitive information and data breaches, especially if JPMorganChase fails to adequately maintain, secure and upgrade its technological infrastructure in response to rapidly evolving technological advances

Read in the 10-K filed Feb 13, 2026 ↗

•regulatory and compliance challenges arising from rapidly evolving applicable law, including differences, inconsistencies and conflicts in international standards, which could increase costs, lead to fines and sanctions, and restrict JPMorganChase’s use of AI technologies

Read in the 10-K filed Feb 13, 2026 ↗

•competitive disadvantage if competitors are able to deploy AI more quickly or effectively, potentially gaining advantages in cost efficiency, client and customer experience, or product innovation, which could result in a loss of market share to competitors, or

Read in the 10-K filed Feb 13, 2026 ↗

•replacement or disintermediation of direct customer relationships if AI agents autonomously manage or intermediate financial decisions and product selection or other services for customers.

Read in the 10-K filed Feb 13, 2026 ↗

It is also possible that JPMorganChase could miscalibrate its workforce planning and employee training efforts either because of over-reliance on AI or the failure to appropriately adopt AI. Over-reliance on AI could cause JPMorganChase to experience shortages in qualified staff due to reduced hiring or retention of employees, or could hinder the development or enhancement of important skills among its employees, including critical thinking, problem-solving, judgment, creativity and adaptability. On the other hand, any efficiencies or competitive advantages that AI may offer could be squandered if JPMorganChase fails to adopt AI in a timely and judicious manner and to make related adjustments to its workforce.

Read in the 10-K filed Feb 13, 2026 ↗

•inaccurate or misleading information about JPMorganChase or its clients, including results generated by AI, that is rapidly and broadly disseminated through any form of media, including social networking sites, and

Read in the 10-K filed Feb 13, 2026 ↗
KEY KEYCORP /NEW/ · National Commercial Banks

◦Our development and use of AI, including through third parties, exposes us to inherent risks that may adversely impact KeyCorp.

Read in the 10-K filed Feb 23, 2026 ↗

We use, and will increasingly use AI, including through third party vendors acting on our behalf and other counterparties, in connection with our business and operations. AI is complex and rapidly evolving and in order to compete with other banks and financial institutions effectively, we must incorporate new and emerging AI technology into our business and this may subject us to new or heightened legal, regulatory, operational, and other risk. The legal and regulatory environment relating to AI is uncertain and evolving, and any changes to applicable laws and regulations could require changes to our use of AI technology and could cause an increase in associated costs and expenses. We may also be unsuccessful in realizing the intended benefits of AI or otherwise enhancing our business or operations and our competitors may incorporate AI in their businesses or operations more quickly or more successfully than us, all of which could occur despite considerable expense and which could negatively affect our financial condition and results of operations.

Read in the 10-K filed Feb 23, 2026 ↗

The models underlying AI that we may leverage, including those developed by third party providers, may be incorrectly or inadequately designed or implemented and trained on, or otherwise use, data or algorithms that are incomplete, inadequate, misleading, biased, or otherwise flawed, or that are subject to intellectual property rights not known to us, and that ultimately produce outputs that are similarly flawed but that which we or third parties acting on our behalf rely, and any such flaw may not be easily and readily detectable. The limited transparency into the underlying complexity of AI and associated models that we rely on makes reproducing the connection between input and output, at times, difficult or impossible. If the AI that we leverage is flawed in such ways, we may make inaccurate or ineffective decisions and otherwise incur operational inefficiencies, compliance issues, competitive and reputational harm, adverse legal and regulatory actions, or other adverse impacts to our business and operations. We may not be able to sufficiently mitigate or detect any of the foregoing risks given the emerging nature of AI technology. Additionally, inappropriate or controversial data practices by third party AI developers and

Read in the 10-K filed Feb 23, 2026 ↗

their end-users could adversely affect public opinion of AI and ultimately impair acceptance of AI, including those incorporated into our business and operations.

Read in the 10-K filed Feb 23, 2026 ↗
RF REGIONS FINANCIAL CORP · National Commercial Banks

The development and use of AI presents risks and challenges that may adversely impact our business.

Read in the 10-K filed Feb 24, 2026 ↗

We and our third-party vendors, clients or counterparties develop, deploy and incorporate AI technology in certain business processes, services and products. Our current and increasing development, deployment and use of AI presents a number of risks and challenges to our business. The legal and regulatory environment relating to AI is uncertain and rapidly

Read in the 10-K filed Feb 24, 2026 ↗

evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as new and existing provisions in intellectual property, privacy, cybersecurity, consumer protection, employment and other laws applicable to the use of AI and changes in interpretation of the foregoing. These evolving laws and regulations could require changes in our implementation of AI technology and increase our compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may, and often do, produce output or take action that is incorrect, that result in the release of personal, confidential or proprietary information, that reflect or introduce discrimination, errors or biases included in the data on which they are trained or prompts or algorithms on which they rely, that infringe on the intellectual property rights of others or that is otherwise harmful. In addition, the complexity of many AI models makes it challenging to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias and complying with applicable laws and regulations, including those that require documentation or explanation of the basis on which decisions are made. Additionally, if we do not have sufficient rights to use AI models, the data on which they are trained or prompts or algorithms on which they rely or the output thereof, we could also incur liability through the violation of applicable laws and regulations, third-party intellectual property, privacy or other rights or contracts to which we are a party.

Read in the 10-K filed Feb 24, 2026 ↗

Further, we currently rely, and expect to continue to rely, on AI models developed by third parties, and are and would be dependent in part on the manner in which those third parties develop, train and deploy their models, which involves risks arising from any discrimination, errors or bias in the models and the data on which they are trained or prompts or algorithms on which they rely, as well as the risk of inadvertent disclosure or incorporation of our personal, confidential or proprietary information into publicly available training sets. Any of these risks may impact our ability to realize the benefit of such information or adequately maintain, protect and enforce our intellectual property rights, and could result in regulatory compliance failures and otherwise harm our competitive position and business. The use of AI by companies has resulted in, and may in the future result in, systems failures or errors and cyber-attacks or other similar incidents. We may not be able to sufficiently mitigate, remediate or detect any of the foregoing limitations or risks given our and other market participants’ evolving experience with using AI, the pace of technological change, and rapid adoption of AI by our third-party vendors, clients, counterparties or competitors. Any of these risks could expose us to liability or adverse legal or regulatory consequences and harm our reputation and the public perception of our business or the effectiveness of our security measures.

Read in the 10-K filed Feb 24, 2026 ↗

We are also exposed to risks arising from the use of AI technologies by bad actors to commit fraud and misappropriate funds and to facilitate cyber-attacks and other similar incidents. Generative AI, if used to perpetrate fraud or launch cyberattacks or other similar incidents, could create panic at a particular financial institution or securities exchange, which could pose a threat to financial stability.

Read in the 10-K filed Feb 24, 2026 ↗

Moreover, inappropriate or controversial data practices by AI developers and users, or other factors adversely affecting public opinion of AI, could also impair the acceptance of AI. If the AI technology that we incorporate into our business processes, services or products are, or are perceived to be, deficient, inaccurate or controversial, we could suffer operational inefficiencies, competitive harm, legal liability, brand or reputational harm or other adverse impacts on our business, results of operations and financial condition. Additionally, our competitors and other third parties may incorporate AI into their business processes, services and products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our business, results of operations and financial condition.

Read in the 10-K filed Feb 24, 2026 ↗
TFC TRUIST FINANCIAL CORP · National Commercial Banks

•The use of AI in our products and services, as well as our business and the industry more broadly, may negatively impact our business, operations, financial condition, results of operations, prospects, and reputation.

Read in the 10-K filed Feb 24, 2026 ↗

The Company has experienced, and may continue to experience, failures and disruptions affecting the stability, performance, security, and availability of its applications, operating systems, and infrastructure. These include degraded processing performance, data quality issues, loss of network connectivity, software malfunctions and misconfigurations, and interruptions in the availability and reliability of cloud-based and other third-party systems and services. The Company’s substantial and increasing reliance on cloud service providers and other external technology vendors heightens exposure to risks outside of its control, including system outages, downtime, cyber-attacks, and adverse financial and operating conditions at those providers and vendors. The Company’s expanding use of AI tools and related technologies introduces additional operational risks, including reliance on data integrity and model performance as well as third-party AI services that may fail, degrade, or produce inaccurate or unexpected outputs.

Read in the 10-K filed Feb 24, 2026 ↗

The Company regularly updates and modifies its applications, operating systems, and infrastructure to support business and operations, including growth initiatives and regulatory compliance requirements. These activities involve significant costs and create additional risks related to the implementation, integration, and effectiveness of new or modified applications, systems, and infrastructure. The introduction, updating, or retraining of AI models and other methods of automation may amplify these risks. Changes in model behavior or configuration may produce unintended outcomes, increase susceptibility to operational errors, or reduce the effectiveness of existing controls. Failures associated with upgrades, configuration changes, system conversions, AI model deployment, integration efforts, and related activities may result in operational interruptions, system failures, or reduced control effectiveness.

Read in the 10-K filed Feb 24, 2026 ↗

Failures to properly maintain, upgrade, or secure applications, operating systems, and infrastructure may increase the Company’s susceptibility to cybersecurity threats, including supply chain attacks, and may impair the Company’s ability to meet business continuity and resiliency objectives. AI-enabled technologies may further expand the cyber-attack surface and velocity, including exposure to adversarial manipulation, data poisoning, and vulnerabilities in third-party AI and other platforms. These events have resulted in adverse client impacts, including the inability to access account information or conduct transactions through ATM, online, or mobile channels, the exposure of confidential, proprietary, personal, and other sensitive information, the posting of duplicative or delayed transactions, and delays in obtaining assistance through call centers. The Company cannot assure that similar or more severe operational or technology failures and disruptions, including AI-related failures or third-party service interruptions, will not occur in the future or that their effects can be prevented, contained, or remediated in a timely manner.

Read in the 10-K filed Feb 24, 2026 ↗

The use of AI in our products and services, as well as our business and the industry more broadly, may negatively impact our business, operations, financial condition, results of operations, prospects, and reputation.

Read in the 10-K filed Feb 24, 2026 ↗

Our industry is subject to rapid and significant technological change. To compete effectively, the Company uses new and evolving technologies, including AI, to help improve our marketing, referrals, products, services, and client service, to increase productivity for internal code and software development and testing, and to automate certain business decisions and risk management practices, such as fraud identification. The Company's use of AI is subject to risks that models, prompts, algorithms, and datasets, as well as related decisions, predictions, analysis, and other output, are flawed, inaccurate, of poor quality, insufficient, biased, or otherwise erroneous or inadequate, any of which may not be easily detectable. In addition, the models and processes relating to AI are not always transparent, which could increase the risk of unintended deficiencies. Ineffective implementation of AI by us or our third-party providers could subject us to additional risks that we cannot adequately predict or mitigate. Further, inappropriate or controversial data practices by developers and end-users, or other factors adversely affecting public opinion of AI and machine learning, could impair the acceptance and use of AI. If any of these risks are realized, we could suffer business and operational disruptions, operational inefficiencies, competitive harm, legal liability, increased regulatory scrutiny, reputational harm, or other consequences that the Company cannot predict, any of which could negatively affect the Company's financial condition and results of operations.

Read in the 10-K filed Feb 24, 2026 ↗

Regulatory and other legal frameworks surrounding AI continue to evolve and remain uncertain. If we do not have sufficient rights to use models, prompts, algorithms, and datasets on which our AI technologies rely or the related decisions, predictions, analysis, or other output, we could incur significant damages, substantial fees, deprivation of access, or considerable expense through a violation of applicable law, third-party intellectual property, privacy, or other rights, or other violations. New or changing statutes, regulations, or industry standards and practices may increase costs, restrict use cases, or require significant changes to our deployment or our existing systems and controls. If we fail to appropriately respond to changes within the AI landscape, including changing public sentiment, we could face legal, regulatory, or brand and stakeholder risk that may negatively impact our business, operations, financial results, financial condition, or reputation. In addition, the use of AI by companies has resulted in, and may in the future result in, cybersecurity breaches, attacks, and other similar incidents as well as data privacy violations.

Read in the 10-K filed Feb 24, 2026 ↗

In addition, advances in technology, such as automation and AI, may lead us to modify our workforce strategy. This could require Truist to invest in additional teammate training, manage impacts on morale and retention, and compete for candidates who possess more advanced technological skills, all of which could have a negative impact on Truist’s business and operations.

Read in the 10-K filed Feb 24, 2026 ↗