Yes. Financial advisors can use ChatGPT, Claude, and other AI tools, because no rule prohibits them. What regulators care about is how you use these tools, what data you put into them, and whether you can show your work when someone asks.
That's the short answer, and it's worth saying plainly because so much of the online conversation implies otherwise. The longer answer is worth a few minutes of your time, because the difference between advisors who use AI confidently and advisors who avoid it entirely usually comes down to understanding a handful of details that nobody explains in plain language.
Let's walk through them.
Is There a Rule That Says Advisors Can't Use ChatGPT?
No. Neither the SEC nor FINRA has published a rule that bans advisors from using ChatGPT or any other AI tool. Both regulators have said, repeatedly, that their rules are technology neutral. The obligations that govern your communications, your recordkeeping, and your handling of client information apply the same way whether a human wrote every word or an AI helped.
That framing matters. Your existing obligations are the whole test. If your communications are accurate and fair, if your client data is protected, and if your work is supervised and documented the way it's supposed to be, the tool you used to draft the first version isn't the issue.
Many advisors hear "compliance and AI" and assume there's a prohibition buried somewhere. There isn't. What exists is a set of expectations about how you use it, and those expectations are more reasonable than the chatter suggests.
What Do Regulators Actually Say About AI?
More than many advisors realize, and the direction is consistent.
FINRA's 2026 Annual Regulatory Oversight Report, released in December 2025, includes a standalone section on generative AI for the first time. The report describes how member firms are already using AI, sets out expectations for governance, testing, and monitoring, and addresses AI agents for the first time, meaning the tools that can complete tasks on their own rather than just draft text.
The report doesn't tell firms which tools to use or avoid. What FINRA expects is that firms document how AI is used, test and monitor what it produces, keep a human accountable for the output, and retain records of AI-assisted work. Use it, supervise it, and be able to show your work. That's the pattern.
If you're an RIA rather than a broker-dealer rep, FINRA's report doesn't bind you directly, but the SEC covers the same ground through rules you already know. The marketing rule holds your public communications to accuracy and fairness standards no matter who or what drafted them. Regulation S-P requires you to safeguard client information. Books and records requirements apply to AI-assisted work product the same way they apply to everything else in your practice.
Put those together and the picture is encouraging. Regulators expect you to use AI like a professional, with human oversight, documentation, and common sense. They don't expect you to avoid it.
Where Are the Real Compliance Risks?
There are three, and none of them is the tool itself.
The first is client data. Pasting client information into a consumer AI plan is where advisors genuinely create problems for themselves, usually without realizing it. The fix is a workflow habit, anonymize first and paste second, plus an understanding of what your plan tier actually does with your data. I wrote a full breakdown of what PII and NPI mean for advisors and how to use AI safely with client information, and if client data is your main concern, start there.
The second is accuracy. AI can produce confident, wrong answers. When your name is on a piece of client communication, the accuracy obligation is yours, and "the AI said it" has never been a defense for anything. This is why every AI workflow in your practice needs a human review step before anything reaches a client or the public. You'd review a junior associate's draft before sending it. Treat AI drafts the same way.
The third is documentation. If a regulator asks how AI is used in your practice and the honest answer is "it varies and nothing is written down," that's the finding. Not the AI use itself. The absence of a policy describing it.
I teach financial advisors how to use AI for content, communication, and client attraction. New frameworks and prompts every Tuesday and Friday. Subscribe free or get full access for $20/month at amplifyforadvisors.substack.com.
Does Your Firm Need a Written AI Policy?
If AI touches your practice at all, yes, and it's easier to write than you'd expect.
A written AI use policy does two jobs. It tells you and anyone who works with you what's allowed, what's off limits, and what gets reviewed before it goes out. And it gives you a clean answer when someone asks. That someone might be a regulator during an exam, a custodian doing due diligence, or a sharp prospect who wants to know how you protect their information. Advisors are getting this question more often, and the ones with a one-page answer come across as exactly what they are, professionals who thought it through ahead of time.
The good news is that a solo or small-firm policy doesn't need to read like it came from a legal department. It needs to cover which tools you use, what data can and can't go into them, who reviews AI-assisted output, and how you keep records. If you want a head start, the Compliance-Safe AI Playbook includes a sample AI use policy for solo RIAs, along with language swap tables and a pre-publish checklist built for exactly this.
What About the Content AI Helps You Create?
The same standards that always applied to your content still apply. Nothing about AI changes what makes a communication compliant. It changes how fast you can produce a first draft.
The practical risk is that AI defaults to promotional language. Left alone, it reaches for words like guaranteed and proven and best, the exact language your compliance training taught you to avoid. The answer is to build compliance instructions into your prompts from the start rather than editing problems out afterward. Every prompt I publish includes a compliance guardrails section for this reason, and once you work this way it becomes automatic.
If you want to go deeper on content specifically, I covered the compliance-first approach to AI content in a full article, and paid subscribers can use the complete outcome-focused compliance language system from Issue 25 of the newsletter.
The Bottom Line for Advisors Using ChatGPT
You can use ChatGPT. You can use Claude. No regulator has told you otherwise, and the ones who have spoken on the record expect professional use rather than abstinence.
The advisors doing this well share a short list of habits. They keep client information out of consumer AI tools unless it's anonymized. They review everything before it ships. They have a written policy describing how AI fits into their practice, and they can produce it when asked.
That's a Saturday morning of setup, and it buys you years of using these tools with a clear conscience.
The technology is the easy part. The confidence comes from knowing where the lines actually are, and now you do.
Sam Farrington, CFP®
Sam Farrington is a Certified Financial Planner and the creator of Amplify for Advisors. He teaches financial advisors how to use AI to communicate authentically, stay compliant, and build a practice that attracts the right clients. He publishes twice weekly on Substack and is building the first suite of AI Skills designed specifically for financial advisors.
Subscribe at amplifyforadvisors.substack.com or explore more at amplifyforadvisors.ai.