Bankers should treat an AI summary as a review draft, not an approved record. Assign a human reviewer, preserve the authorized transcript and recording location, and test each material statement against a speaker, timestamp, and source document. Recheck numbers, names, negations, uncertainty, and commitments. Separate what management said from the banker’s interpretation, flag unresolved transcription errors, and obtain management confirmation for material claims before using them in a CIM, teaser, diligence response, or internal decision. Restrict access according to the engagement and applicable confidentiality duties. If a pilot produces repeated speaker, numeric, privacy, or attribution errors, stop using it until the workflow, tool, or review threshold is changed and retested. [1] [2]
Start with a reviewable record, not a polished summary
The first control is to define what the AI output is. It is a working note generated from an input, not evidence that a statement is true. Label the file as an unverified draft, identify the meeting date, and link it to the authorized transcript version. Keep the raw transcript unchanged so a reviewer can distinguish the source from any edited note.
Create a small record header with the engagement identifier, source version, reviewer, review date, and status. If an audio recording exists, record its approved location rather than copying it into a new system without permission. A summary that cannot be traced back to the underlying material should not become the source for a CIM, teaser, diligence answer, or valuation discussion. FINRA says firms remain responsible for obligations when they use generative AI and should consider reliability, accuracy, data privacy, and data integrity in governance. [2]
Set permission boundaries before processing
Before uploading a transcript or recording, identify who owns the material, who authorized the processing, and who may view the resulting notes. Check the engagement letter, confidentiality arrangements, information-barrier rules, client instructions, and the tool’s handling terms with the appropriate internal or external reviewer. Do not assume that a meeting participant’s consent covers every later use, jurisdiction, or recipient.
Use the least sensitive input that still answers the task. If a text transcript is sufficient, do not process audio. Remove unrelated personal information where practical, and keep names, customer details, and nonpublic financial information restricted. Define deletion, retention, export, and access steps before the pilot. NIST describes its AI risk framework as voluntary guidance for incorporating trustworthiness considerations into the design, development, use, and evaluation of AI systems, which supports making these choices explicit rather than treating a tool as automatically safe. [1]
Require speaker and timestamp evidence
Ask the system to preserve speaker labels and timestamps for every material point. The reviewer should sample the beginning, transitions between speakers, interruptions, and sections containing figures or commitments. Compare the note with the transcript at the cited timestamp, not with the summary’s wording alone. A wrong speaker can change a statement from management guidance into a banker conclusion, or turn a question into an assertion.
Use a review log with fields for claim, speaker, timestamp, source excerpt, reviewer result, and correction. Mark a speaker as unknown when the source does not establish identity. Do not silently guess from voice, job title, or conversational context. If the recording is available and its review is authorized, use it to resolve unclear words, overlapping speech, tone that changes meaning, and transcript omissions. Otherwise, preserve the uncertainty and identify the missing check.
Check numbers, negations, and uncertainty separately
Numeric errors deserve a separate pass because a plausible sentence can conceal a material mistake. Reconcile revenue, margins, debt, dates, percentages, units, currencies, customer counts, and ranges to the transcript and, where available, the company’s source exhibit or financial schedule. Record the original wording when management gave an estimate, a range, a target, or a conditional statement. Do not convert an approximate answer into a precise fact.
Search specifically for negations and qualifiers: no, not, below, above, approximately, expected, may, could, subject to, and versus. Check whether the AI merged two periods or attributed a forecast to historical performance. If a number cannot be verified, label it unresolved and keep it out of outward-facing materials until a human resolves it. FINRA identifies accuracy and privacy among the risks that firms should consider when using generative AI. [2]
Separate management statements from banker interpretation
Use distinct fields for management statement, source reference, banker interpretation, and open question. A management statement might say that a customer renewal is expected in a stated quarter. A banker interpretation might assess how that expectation affects concentration or forecast quality. Those are different propositions and need different support. The note should never make the interpretation look like a quotation from management.
Require the reviewer to identify whether each sentence is a direct statement, a paraphrase, an inference, or an unresolved question. Keep inferences out of the management-confirmation request unless they are clearly labeled as the banker’s question. This separation reduces the risk that a polished summary will be reused as if management approved the banker’s analysis.
Confirm material claims with management
After source checking, send a focused confirmation list through the approved engagement channel. Include only material corrections, ambiguous statements, and commitments that need an owner or date. Show the proposed wording, source reference, and the requested response. Ask management to confirm, correct, or decline to confirm each item. Keep the response with the reviewed note and preserve the difference between management’s confirmation and the banker’s conclusion.
Confirmation is not a substitute for source review. Management may correct a transcription error, but a confirmation does not independently establish a financial figure or resolve a legal, accounting, tax, or regulatory question. Escalate those questions to the appropriate qualified adviser. If management does not respond, mark the claim as unconfirmed rather than treating silence as approval.
Turn agreed follow-up into controlled work
Extract follow-up only from an explicit commitment or a clearly labeled banker question. For each item, record the action, owner, due date or timing, source, status, and the condition that would close it. Examples include providing a customer concentration schedule, clarifying a definition, or confirming which period a metric covers. Do not let an AI system send outreach, make approvals, negotiate, or disclose information. A human owner must decide whether and how to act.
Use stopping conditions. Pause publication or circulation when a material claim lacks a source, a speaker is unresolved, a number conflicts with the underlying schedule, a permission is unclear, or an owner cannot confirm the follow-up. Reopen the note when a source version changes. The implementation outcome should be verified management-call notes with source references, material corrections, and an owner-assigned follow-up list, not merely a fluent summary.
Pilot the workflow and document the decision
Run a limited pilot on low-risk material for which the team already has permission and a known reviewer. Define the review sample, error categories, escalation path, and acceptance threshold before processing. Compare the AI draft with the source and record false attributions, missed qualifiers, numeric errors, privacy issues, and time spent correcting them. These observations are workflow evidence for the firm, not a guarantee that the tool will perform the same way on another meeting or model.
Stop the pilot if material claims cannot be traced, permissions cannot be demonstrated, the reviewer cannot complete the checks, or repeated errors survive prompt and process changes. Reassess the input, tool, reviewer capacity, and retention plan before trying again. FINRA says member firms should evaluate generative AI tools before deployment and ensure they can continue complying with existing obligations; its notice does not create new requirements and the application depends on the use case. [2] NIST likewise presents its framework as a risk-management resource rather than a certification or safe-harbor determination. [1]
Keep supervision and document control proportionate
The final control is document ownership. Name the person accountable for review, the person authorized to resolve management corrections, and the person who decides whether a verified note may feed a transaction document. Preserve the reviewed version, correction history, confirmation record, and unresolved issues under the firm’s approved document-control process. Limit edit rights after sign-off, and do not overwrite the original transcript or the review log.
For FINRA members, Rule 3110 requires a supervisory system reasonably designed to achieve compliance, written procedures, and designated responsibilities. It also requires written review procedures for relevant correspondence and internal communications, with review evidenced in writing. [3] The rule applies to FINRA members and should not be presented as a blanket rule for every adviser, banker, jurisdiction, or transaction. Each firm should align the workflow with its applicable obligations and obtain qualified legal or compliance advice where the facts require it.
Acquivo is a software platform that delivers the entire sell-side M&A process, valuation, marketing materials, buyer matching, and deal management, on one platform for business owners, M&A attorneys, and boutique investment banks. The platform is user-operated, so the bank remains responsible for deciding what may be processed, who reviews it, what is confirmed, and when a note is fit for a particular use.
Key Points
- Label AI output as an unverified working draft and preserve the authorized transcript version.
- Check every material claim against speaker, timestamp, transcript or authorized recording, and the relevant source exhibit.
- Run a separate pass for numbers, units, dates, negations, ranges, and uncertainty instead of relying on fluent prose.
- Separate management statements from banker interpretation and keep unresolved errors visible.
- Obtain management confirmation for material corrections and assign each follow-up to a human owner with a stopping condition.
Sources and references
Source retrieval dates record research access, not article publication. Read our editorial and date policy.
Choose your next step
Acquivo is user-operated software. Owners and their professionals remain responsible for decisions, communications, and professional review.
Educational information, not individual legal, tax, or investment advice. Consult qualified professionals for your circumstances. Acquivo provides software, not representation or negotiation on your behalf.