The AI landscape doesn't move in one direction — it lurches. Some techniques leap from experiment to table stakes in a single quarter; others stall against regulatory walls, technical ceilings, or organisational inertia that no amount of hype can dislodge. Knowing which is which is the hard part. The State of Play cuts through the noise with a rigorously maintained index of AI techniques across every major business domain — classified by maturity, evidenced by real-world adoption, and updated daily so you always know where you stand relative to the field. Stop guessing. Start knowing.
A daily newsletter distilling the past two weeks of movement in a domain or two — delivered to your inbox while the index updates in the background.
Each dot marks the weighted maturity of practices within a domain — hover for a brief summary, click for more detail
AI that analyses compliance gaps, generates remediation plans, and creates and maintains organisational policies. Includes gap-to-policy mapping and policy version management; distinct from regulatory monitoring which tracks external changes rather than managing internal compliance.
AI-driven compliance planning remains trapped between accelerating regulatory deadlines and persistent governance immaturity. The practice -- using AI to analyse compliance gaps, generate remediation plans, and manage policy lifecycles -- has been bleeding-edge since 2021. Five years of evidence reveals a consistent pattern: tooling maturity has advanced significantly, but organisational governance capacity and execution discipline have not kept pace. A survey of 1,200 compliance officers found 78% had implemented or piloted AI tools while only 42% maintained robust governance policies; newer data shows the gap widening. In April 2026, with the EU AI Act high-risk enforcement deadline 4 months away, the core tension remains unresolved. Sprinkling Act's independent readiness audit of 50 European companies found 96% lack public AI Act compliance positions and 72% are classified high-risk. Only 24% of organisations globally have formal AI governance programs in place. Regulatory pressure is real and penalties are material — €35 million or 7% of annual turnover for non-compliance. Yet 47% of compliance leaders cite time constraints as the primary barrier to deployment, and only 55% of firms have implemented digital compliance tools. AI excels at rule-based compliance work (>90% accuracy) but falters on judgment-intensive decisions (28-88% accuracy), making permanent human oversight a structural requirement. Organisations pursuing automation without governance are generating new regulatory exposure as fast as they retire existing risk. The practice remains experimental until execution discipline catches up with regulatory urgency.
Vendor tooling has matured significantly and adoption economics are compelling. OneTrust's March 2026 AI Policy Manager release names three enterprise customer deployments in production (Blackbaud, Kuehne+Nagel, Lumen Technologies) implementing standards-aligned policy frameworks at scale. Schindler runs OneTrust across 1,000+ offices in over 100 countries; KPMG UK contracted Aiimi for multi-year enterprise data governance; ComplyNexus shipped a unified suite integrating ISO 42001, the EU AI Act, and NIST AI RMF. The market is responding: Gartner projects the AI governance platform market will grow from $492M in 2026 to over $1B by 2030, with 65% of organisations expected to integrate compliance automation into DevOps workflows by 2028. Deployment ROI is measurable: independent benchmarking across 7 industries documents 42-68% operational cost reduction with 7-month median payback; organisations automating audit preparation report 85% time reduction in evidence collection and 90% in questionnaire response cycles. The economic case is real.
But deployment remains concentrated among early adopters. The barrier is not tooling cost or capability, but organisational execution. Only 16% of firms have fully implemented AI governance frameworks; 69% of compliance decision-makers warn that AI will drive compliance issues in the next 12 months; 29% have no formal AI strategy. A critical breakdown appears between governance documentation and operational execution: 44% of organisations lack documented risk classification processes, and 61% have not completed risk classification despite deployments. Critical negative signals emerge from the field: 47% of compliance leaders cite time poverty as the adoption barrier (not capability gaps); 37% report more time managing AI risk year-over-year despite increased investment; 56% of organisations cannot track their own AI integrations, creating GDPR and consent violations. The governance-execution gap persists despite awareness and investment. Regulatory deadline pressure is acute: EU AI Act high-risk enforcement occurs 4 months post-scan (August 2, 2026), with fines up to €35M or 7% of global revenue, yet fewer than half of organisations have foundational controls in place. The practice remains in selective-deployment phase: motivated early adopters consolidating production systems, majority of enterprises lacking governance maturity, skills, and enforcement discipline required to deploy confidently beyond pilot stages.
— Sprinto CISO survey (103 respondents) reveals critical adoption gap: 69% budget for AI risk management but only 25% rate governance maturity advanced; 39% have AI policies on paper with zero enforcement—evidence of policy-to-practice gap.
— Haast Series A funding (Peak XV Partners) validated by 4.5x revenue growth, zero customer churn, and Fortune 500 deployment; evidence of market validation for compliance automation embedding policy logic into workflows.
— Stanford HAI 2026 AI Index (9th edition) documents adoption-governance gap: organizational AI adoption at 88% but incidents up 55% (362 in 2025 vs 233 in 2024); framework adoption limited (36% ISO 42001, 33% NIST AI RMF).
— AI-assisted compliance planning deployment: Volentis Compliance Agent automates gap analysis, policy interpretation, audit preparation. Reported metrics: 60% faster audit prep, 80% faster gap identification, 70% less research time.
— Modulos CEO analysis redefining compliance planning: shift from 'compliance deliverables' (documents) to 'compliance state' (operational posture with verifiable controls, audit trails, incident management); document-first strategies inadequate post-EU AI Act enforcement.
— FINRA 2026 regulatory guidance asserts traditional supervisory rules (3110, 2210) apply fully to AI systems; specifies governance requirements (cross-functional committees, usage policies, testing, human oversight) binding on financial services.
— Architectural analysis proposing compliance-as-code: policy and controls as versioned machine-readable source (OSCAL), deriving policy documents, implementation guides, assessments automatically—advancing compliance planning discipline.
— Sia Partners platform for end-to-end compliance planning: horizon scanning, regulatory intake, gap analysis, controls mapping, audit readiness—major consulting firm deployment of compliance automation infrastructure.