The AI landscape doesn't move in one direction — it lurches. Some techniques leap from experiment to table stakes in a single quarter; others stall against regulatory walls, technical ceilings, or organisational inertia that no amount of hype can dislodge. Knowing which is which is the hard part. The State of Play cuts through the noise with a rigorously maintained index of AI techniques across every major business domain — classified by maturity, evidenced by real-world adoption, and updated daily so you always know where you stand relative to the field. Stop guessing. Start knowing.
A daily newsletter distilling the past two weeks of movement in a domain or two — delivered to your inbox while the index updates in the background.
Each dot marks the weighted maturity of practices within a domain — hover for a brief summary, click for more detail
AI that analyses incoming whistleblower reports, triages them by severity and credibility, and routes them for investigation. Includes automated classification and priority scoring; distinct from general ticket triage which handles customer rather than compliance reports.
AI-powered whistleblower report triage has crossed from experimental to production-proven, but deployment is surfacing critical human-AI interaction risks that undermine net benefit. A handful of major platforms process millions of reports annually, automating severity classification, credibility scoring, and investigator routing at scale. Capability maturity is confirmed: Control Risks processed 275,000 multilingual documents ahead of deadline using Relativity aiR, and SAI360 deployed 30+-language routing at ABB. Yet recent peer-reviewed research (May 2026) reveals that analysts receiving AI credibility assessments exhibit 84% over-adoption of flagged-false predictions and make 40% more false accusations than baseline. When users are explicitly warned about AI error rates rather than accuracy metrics, over-reliance is reduced—but that level of governance is not standard. NAVEX's 2026 data shows case closure times lengthening, possibly because AI integration adds procedural overhead rather than net acceleration. The defining tension has shifted: the technology works at triage, but human-AI interaction, regulatory defensibility requirements (audit trails, independent judgment, documented reasoning), and investigation capacity emerge as the binding constraints. AI hallucination (58-82% of legal queries), algorithmic bias (fabrication of ~18% of compliance data in audited systems), and base-rate false positives (10,000+ per million communications) are now documented failure modes—not theoretical risks.
The vendor ecosystem has consolidated around a small number of integrated GRC platforms. NAVEX leads with 2.15 million reports across 4,000+ organisations; Diligent (which acquired Vault Platform) and EQS Integrity Line (14,000+ global customers) compete on AI-assisted classification, anonymisation, and multi-channel intake. Case IQ released Clairia (May 2026), an AI assistant for compliance investigations with policy-aware guidance and GDPR compliance; Resolver announced AI-driven case management delivering 48% efficiency gains and 33% reduction in unreported cases. Production-scale deployments confirm capability: Control Risks used Relativity aiR to analyse 275,000 multilingual whistleblower documents ahead of deadline; SAI360's deployment at ABB shows 30+-language AI translation and automatic case routing with zero-IP-tracking anonymity; consulting firms deploying LLM-powered analysis achieve 80% time reduction on document processing.
Regulatory pressure is accelerating demand. Japan criminalised whistleblower retaliation; the UAE, Netherlands, and California (Transparency in Frontier AI Act) mandated whistleblower protections. The DOJ explicitly instructs prosecutors to assess whistleblower protection and anonymity safeguards. These drivers explain rising reporting volumes—Europe's rate jumped to 0.67 per 100 employees—but they surface AI integration trade-offs. NAVEX's 2026 analysis reveals that case closure times are lengthening, possibly due to AI tool integration adding procedural overhead.
A critical governance gap is now documented: regulators evaluate organizational defensibility of AI-assisted decisions, not the algorithms themselves. StoneTurn compliance analysis (May 2026) emphasizes that AI output alone does not justify conclusions; audit trails, independent human judgment, and documented reasoning are non-negotiable. MIT research (May 2026) documents acute failure modes: AI hallucination at 58-82% on legal queries, and demographic bias perpetuating stereotypes across professional recommendations. Credibility assessment poses particular risk—peer-reviewed study (May 2026) shows AI lie detection at 66% accuracy triggers 84% over-adoption when flagged false; warnings about error risk are psychologically more effective than accuracy metrics at reducing over-reliance. Only 32% of organisations have formal AI governance programmes in place. Whistleblowers using mainstream consumer LLM tools face identity verification barriers and data-sharing risks that undermine anonymity protection—a distinct gap between enterprise infrastructure and ad-hoc reporter tools. The critical question is no longer whether AI triage works, but when to automate versus preserve human judgment, how to achieve regulatory defensibility, and whether integration architecture creates net positive outcomes.
— Smart Integrity Platform delivers 40% HR workload reduction through AI-based risk assessment and real-time report prioritization, serving 1,000+ organizations across 30+ countries with EU Whistleblower Directive compliance and audit-trail evidence—proven deployment at scale.
— NAVEX 2026 Europe benchmark: 2.37M reports analyzed, adoption at 0.85 reports/100 employees, 53-day median closure, 58% anonymous reporting—documents regional adoption variance and investigation efficiency challenges driving demand for AI-assisted triage.
— Comprehensive market architecture: whistleblower software market sized at $1.4B (2027), enterprise AI platforms priced $14-48 PEPY, regulatory drivers (DOJ, EU Directive) compressing sales cycles—evidence of market maturity and economic sustainability of AI-enabled triage platforms.
— Stanford RegLab documents AI hallucination at 58-88% on legal queries, with courts sanctioning lawyers not for AI use but for failure to verify output—directly applicable to whistleblower analysis which feeds legal investigation conclusions and carries verification obligations.
— EQS Group's May 2026 benchmarking of frontier AI models on real compliance tasks including whistleblower report analysis, identifying where AI excels and where human oversight remains essential—direct assessment of model performance on this practice.
— Case IQ Playbooks feature enables organizations to shape AI behavior per policies and governance standards, with AI guardrails and outcome controls embedded in investigation workflows—evidence of production AI triage with mandatory human oversight and regulatory defensibility.
— Compliance practitioner explains why AI whistleblower analysis remains difficult despite product maturity: named officers retain legal liability regardless of AI involvement, and regulatory fragmentation across EU/US/UAE/Singapore creates accountability ambiguity that slows deployment.
— Pre-registered empirical study (N=2,691) documents systematic miscalibration: users overestimate AI benefits and develop over-reliance feedback loops even when AI provides no efficiency gain—directly applicable to investigation teams reviewing AI-triaged reports.