Perly Consulting │ Beck Eco

The State of Play

A living index of AI adoption across industries — where established practice meets the bleeding edge
UPDATED DAILY

The AI landscape doesn't move in one direction — it lurches. Some techniques leap from experiment to table stakes in a single quarter; others stall against regulatory walls, technical ceilings, or organisational inertia that no amount of hype can dislodge. Knowing which is which is the hard part. The State of Play cuts through the noise with a rigorously maintained index of AI techniques across every major business domain — classified by maturity, evidenced by real-world adoption, and updated daily so you always know where you stand relative to the field. Stop guessing. Start knowing.

The Daily Dispatch

A daily newsletter distilling the past two weeks of movement in a domain or two — delivered to your inbox while the index updates in the background.

AI Maturity by Domain

Each dot marks the weighted maturity of practices within a domain — hover for a brief summary, click for more detail

DOMAIN
BLEEDING EDGEESTABLISHED

Regulatory change monitoring — automated policy updates

LEADING EDGE

TRAJECTORY

Advancing

AI that automatically drafts policy updates in response to regulatory changes for human review and approval. Includes tracked-change policy revision and compliance mapping; distinct from impact assessment which analyses but doesn't draft remediation.

OVERVIEW

A small but growing number of forward-leaning organisations now use AI to draft policy updates in response to regulatory changes -- moving from horizon scanning into actual document generation. Production platforms from Regology, FinregE, Scytale, and others, alongside emerging RegTech startups (AscentAI, 4CRisk.ai), demonstrate real-world deployments with measurable impact. Early adopters report striking efficiency gains: peer-reviewed research documents 96% recall and 3.1x analyst efficiency in 4-month production deployments; multi-site case studies show 98% reduction in data discrepancies and $250M revenue impact across 16 facilities; single-deployment instances dropped policy drafting time from five days to one. Market consolidation (CUBE's acquisition of Acin, Zango AI's funding round for regulation-specific LLMs) signals genuine commercial momentum. Yet adoption remains constrained. Only 60% of the most mature compliance organisations have adopted AI-powered regulatory change monitoring; at lower-maturity levels the figure falls to 48%. Data quality and integration challenges affect the majority of adopters, and false negatives in AI-drafted outputs demand multi-layered human review. Every documented deployment keeps humans in the approval loop -- AI drafts, people decide. For most compliance teams, the eight-week manual cycle per regulatory change is still the reality.

CURRENT LANDSCAPE

Deployment is accelerating but constrained by governance maturity. Vendor ecosystem has matured from RegTech specialists to mainstream GRC platform coverage: Regology, FinregE (FCA-contracted), Scytale (1000+ deployments, 4.9/5 G2 rating), and ServiceNow RCM join AscentAI and Clausematch in offering integrated regulatory change monitoring with automated policy drafting. Enterprise adoption is real: Ascent and Clausematch deploy for Goldman Sachs, Citi, and JPMorgan, while DSALTA reports production policy generation at 98% time reduction (20-25 policies drafted in 2-3 hours vs. 2-3 weeks manually). Independent third-party reviews document 12 verified Regology deployments across Fortune 500 banks and healthcare systems, and peer-reviewed research confirms 4-month production deployments achieving 96% recall on gap detection. Yet infrastructure gaps remain acute. Only 24% of organisations have AI governance frameworks in place, and agentic compliance systems fail 15-30% of the time without strict constraints. Saifr CEO documents critical risks: cascading hallucinations where a single flaw propagates through downstream systems, memory poisoning from incorrect data retention, and the "confused deputy" problem where AI systems become reliable targets for adversarial exploitation. EU AI Act enforcement, originally due August 2026, slipped to 2027-2028 due to missing harmonized standards and untrained conformity assessors -- a signal that regulatory infrastructure itself lags deployment readiness. The result: 78% of enterprises have AI pilots but fewer than 15% reached production scale. Compliance teams continue to spend 70% of their time on manual regulatory monitoring, processing each change over an eight-week cycle. Vendors claim 50x acceleration and near-instantaneous policy updates, but deployed systems retain humans in the approval loop. For those who solve governance and integration, the payoff is dramatic. For the majority of compliance teams still establishing basic AI controls, the gap between promise and practice remains a structural barrier.

TIER HISTORY

ResearchJun-2024 → Oct-2024
Bleeding EdgeOct-2024 → Feb-2026
Leading EdgeFeb-2026 → present

EVIDENCE (50)

— FinregE's machine-readable rulebook framework enables AI to detect and respond to regulatory changes; FCA production deployment of structured-data approach addresses hallucination risk in policy-generation systems.

— Major compliance publisher Bloomberg's acquisition of regulatory change management platform Regology signals market consolidation; validates automated policy-update workflows as strategic, durable market category.

— Anthropic's GA AI Governance Legal Plugin includes 'policy-monitor' and 'reg-gap-analysis' skills that identify regulatory changes and trigger policy drafting; 'policy-starter' generates first-draft policies from regulatory sources.

— AscentAI survey reveals critical adoption bottleneck: monitoring regulatory updates ranks top, but gap between alert and action (policy updates, system changes) remains unresolved at scale; 80% of compliance teams still use spreadsheets.

— Expert analysis documents regulatory fragmentation blocking automated policy updates: EU AI Act delayed to Dec 2027, accountability frameworks for AI-agent decisions unsettled across jurisdictions, limiting deployment feasibility at scale.

— Deloitte survey of 400+ large enterprises: 67% report multi-jurisdiction tracking requires more engineering than building their AI systems; confirms enterprise adoption of policy monitoring tools and identifies bottleneck in governance infrastructure.

— Galileo Labs playbook documents architectural patterns for decoupled policy engines that absorb regulatory change without code rewrites, eval engineering for audit evidence, and compliance documentation requirements across EU AI Act enforcement timeline.

— Real-world deployment across hundreds of HR teams demonstrates regulatory-change-triggered policy generation: system automatically generates state-specific handbook language when employment law changes, with attorney verification confirming 95%+ accuracy.

HISTORY

  • 2024-Q2: No documented evidence of production deployments of automated policy update generation during this window. Market focus remained on regulatory monitoring and compliance reporting capabilities.
  • 2024-Q4: Early production deployments documented: RegTech vendors (Regology) deploying generative AI for policy drafting with 95% accuracy. Case studies show 80% reduction in policy drafting time (5 days to 1 day) and 30% accuracy improvement in regulatory change management. RegTech ecosystem matured with 100+ documented solutions. Deployment concentrated in early-adopter financial services and compliance-focused organizations.
  • 2025-Q2: Transition from isolated vendor offerings to mainstream adoption: major RegTech vendors and emerging startups (4CRisk.ai, AscentAI) offering autonomous agents that interpret regulatory changes and propose policy updates. Adoption spreads to multiple industries; survey shows 2/3 of firms use AI in compliance supervision but face implementation barriers. Deployment remains human-in-the-loop with human review of AI-generated policy drafts.
  • 2025-Q3: Market consolidation signals ecosystem maturity with CUBE acquiring Acin, Zango AI raising funding for regulation-specific LLMs. Maturity-dependent adoption data shows 60% of mature organizations use AI-powered automation for regulatory change monitoring. RegTech integration with policy management frameworks recognized as essential for managing regulatory velocity. Critical concerns emerge about false negatives and governance controls, with security experts emphasizing human oversight requirements.
  • 2025-Q4: Evidence of public sector and broader organizational deployment: UK government's Regulatory Policy Committee operationalized AI for routine policy and governance work. Industry surveys show 92% of compliance professionals report increased difficulty managing regulatory change, with 71% viewing AI as essential. Vendors report 50x acceleration in compliance task completion and integration into CI/CD pipelines for continuous monitoring. Adoption barriers remain acute: regulatory acceptance uncertainty, data quality challenges, and persistent false negatives continue to constrain deployment velocity. Risk management consensus emphasizes AI as "copilot not commander" with mandatory human oversight.
  • 2026-Jan: Regulatory catalyst event: multiple U.S. state AI laws effective January 2026 (California SB 53, Texas HB 149, Illinois amendment) drive immediate demand for regulatory change monitoring. Documented multi-site deployment case study shows 98% reduction in data discrepancies and $250M revenue impact across 16 production sites. Adoption acceleration confirmed: AI transitioning from "cautious experimentation" to "real-world deployment across a growing number of firms." Compliance burden quantified: 70% of institutional compliance time spent on regulatory monitoring/processing with 8-week cycle per change. Implementation barriers persist: integration and data quality challenges remain, with false negatives requiring multi-layered human controls.
  • 2026-Feb: Platform maturation continues: Regology and peers maintain production deployments with automated Smart Law Library capabilities that update regulatory content as amendments are introduced. Market indicators show 45% of CCOs prioritizing automation for regulatory compliance. Enforcement deadlines escalate urgency: EU AI Act (August 2), Colorado (June 30), and multiple U.S. state AI laws establish hard compliance dates with penalties up to €35M or 7% global turnover, driving sustained demand for automated monitoring and policy response capabilities.
  • 2026-Apr: Named enterprise deployments confirm production maturity: Ascent and Clausematch automate regulatory change mapping for Goldman Sachs, Citi, and JPMorgan, while DSALTA reports 98% time reduction in policy generation (20-25 policies in 2-3 hours versus 2-3 weeks manually), and Regology has 12 verified Fortune 500 and healthcare deployments. Vendor ecosystem deepens: Scytale GRC platform reports 1,000+ customer deployments with automated policy/governance updates triggered by regulatory changes; FinregE (contracted by the UK FCA for redesigning and hosting the FCA Handbook) demonstrates leading-edge deployment at institutional scale; ServiceNow extends coverage through its mainstream GRC platform. Peer-reviewed research strengthens the accuracy case: an ACL 2026 paper on knowledge-graph-augmented RAG documents a 4-month production deployment achieving 96% recall and 90.7% precision on regulatory change monitoring with 3.1x analyst efficiency gain. A Canarie deployment shows automated policy review workflows cutting cycle time 60% with 99% on-time completion and 100% digital attestation capture. Critical governance constraints persist: only 24% of organisations have AI governance frameworks in place, agentic compliance systems fail 15-30% of the time without strict constraints, and specific failure modes documented by practitioners include cascading hallucinations and memory poisoning that propagate through downstream policy documents. EU AI Act enforcement slippage to 2027-2028 reduces near-term regulatory pressure but does not close the gap between the 78% of enterprises still running pilots and the fewer than 15% that have reached production scale.
  • 2026-May: Multi-jurisdiction demand intensifies deployment pressure. A Deloitte survey of 400+ large enterprises finds 67% report that multi-jurisdiction regulatory tracking requires more engineering effort than building their underlying AI systems—confirming policy-update automation as a core scaling bottleneck rather than a peripheral capability. Galileo Labs documents architectural patterns for decoupled policy engines that absorb regulatory change without code rewrites, alongside eval engineering for audit evidence, as the emerging production standard. South Africa's Cabinet-approved AI policy was withdrawn after discovery of AI-fabricated academic citations in a drafted document, providing a high-profile public failure case demonstrating the risks of policy-generation tools deployed without rigorous human verification. Regology's dedicated Regulatory Change Agent adds automated gap analysis and Smart Law Library that updates as amendments are introduced, expanding the GA vendor set. Board-level enforcement pressure increases: Delaware Caremark fiduciary duty applied to AI systems and SEC enforcement against AI-washing ($42M+ in charges) signal that AI-drafted policy documentation faces growing defensibility scrutiny from regulators and courts. Governance maturity remains the binding constraint, with the broader 67% engineering-burden finding confirming that most enterprises are still resolving foundational tracking infrastructure before automated policy drafting can scale.
  • 2026-Jun (current): Vendor consolidation accelerates: Bloomberg Industry Group acquires Regology, signaling market validation of automated policy-update workflows as strategic, durable category. Anthropic releases GA AI Governance Legal Plugin with explicit 'policy-monitor' and 'policy-starter' skills that identify regulatory changes and generate first-draft policies from regulatory sources. FinregE's machine-readable rulebook framework (adopted by UK FCA) demonstrates architectural path forward, encoding regulations as structured data rather than probabilistic models to mitigate hallucination risk. However, a critical adoption bottleneck persists at scale: AscentAI's 2026 RegTech Benchmark documents that while regulatory monitoring awareness exists, the gap between receiving regulatory alerts and actually acting on them (drafting policy updates, reconfiguring systems) remains stubbornly unresolved—80% of compliance teams still operate on spreadsheets despite scaled RegTech adoption claims. Regulatory fragmentation compounds the problem: EU AI Act enforcement delayed to Dec 2027, accountability frameworks for automated decisions unsettled across US/EU/APAC jurisdictions, and no major regime has resolved how AI agent-drafted policies can be legally owned. Result: leading-edge vendors achieve impressive time-to-draft metrics and higher-tier vendors integrate policy-generation into GRC platforms, but deployment barriers (governance maturity, integration burden, regulatory framework gaps) prevent this from becoming mainstream practice.