
Next year already arrived
There is a quiet conversation in every UK financial services boardroom right now: "we'll get to AI properly next year." The trouble is, next year arrived. Adoption is no longer a question of if, only of how far along you are. There is no third category that survives comfortably: adopt meaningfully, or be overtaken by those who do.
Curvestone, a London-based firm, builds solutions that help regulated firms work smarter, not harder. First, though, the real fear.
No, we are not here to do all the work
When people hear "AI in compliance," they picture a team switched off. That is not our model. Curvestone runs a human in the loop approach: the AI does the heavy lifting on repetitive, high-volume tasks, while your compliance professionals stay in control of judgement, escalation and every final decision.
Your compliance team will not be out of a job. They join forces with us to make the work leaner and reclaim time for tasks they never had capacity for.
What the Mills Review tells us
The FCA launched the Mills Review, led by Sheldon Mills, in January 2026. Its 147-page report landed on 6 July 2026. The central message: AI is shifting from a back-office efficiency tool into a more autonomous layer in how regulated services are delivered. We set out the full picture in What is the Mills Review?
Crucially, the FCA is not writing a new AI-specific rulebook. The framework holds, grounded in statute. The FCA's powers sit under the Financial Services and Markets Act 2000, and the Consumer Duty was made under section 139A via PS22/9, with Principle 12 and the rules in PRIN 2A of the Handbook. Individual accountability runs through the Senior Managers and Certification Regime, also embedded in FSMA.
The review confirms the Consumer Duty as the anchor for AI-mediated services, and firms did not ask for a new regime. They asked for clarity on how the existing one applies as autonomy grows. Keep your framework, then, but evidence accuracy, reliability and accountability far more rigorously.
Keep your framework. Then evidence accuracy, reliability and accountability far more rigorously than you do today.
The Duty runs on data
Under PRIN 2A.9, firms must monitor and regularly review the outcomes customers actually experience, and evidence that in an annual board report. Outcomes-based regulation in practice.
That obligation is only as strong as the data behind it, and that is where the hours vanish. Collating the evidence is the job nobody budgets for and everybody underestimates. Curvestone is proud of its accuracy, and can collate your information in minutes rather than hours. If you want the anatomy of what a good report contains, we broke it down in Consumer Duty board reports.
What consumers actually say
The consumer research makes the case plainly. Around one in five UK adults are already open to AI making financial decisions for them, yet a quarter to a third remain sceptical. They worry about misuse of personal and financial data (around 68%), lack of protection when things go wrong (around 67%) and concentration of power (around 65%).
The firms consumers will trust are not those that remove humans, but those that can prove a human is still accountable. That is the whole point of human in the loop. It is not a compromise on AI ambition. It is the version of AI the market and the regulator are both asking for.
The window is now
2030 planning is 2026 action. The firms that will be trusted and compliant in 2030 are moving now, with humans in the loop and the evidence in the file. The rest are still saying "next year."
Curvestone helps UK financial services firms adopt AI the right way: smarter, leaner, and with your people firmly in control.
- 01FCA, AI and the future of retail financial services (the Mills Review)
- 02FCA, FCA publishes landmark review into impact of AI on retail financial services
- 03Mondaq, Report Issued By The Mills Review: The Future Of AI In Retail Financial Services
- 04Aveni, FCA Mills Review 2026: Findings and Compliance Actions
- 05Lewis Silkin, FCA publishes outcome of Mills Review on AI-driven change in retail financial services
- 06FCA Handbook, PRIN 2A: The Consumer Duty
- 07FCA, PS22/9: A new Consumer Duty
- 08Financial Services and Markets Act 2000
- 09FCA, Consumer Duty board reports: good practice and areas for improvement
The agentic advantage: why regulated firms are built to win with AI
Agentic AI security is governing what an autonomous agent does on a live case, not just what it says: bounding its authority, forcing escalation, and keeping every action reversible and audited. Regulated firms already run that discipline every day. Partner with AI built to that spec and the agentic era is an advantage, not a threat.
Point of viewAI explainability is not optional in regulated compliance
AI explainability means a compliance officer can see which rule an AI flag relied on, which document triggered it, and what evidence sits behind it. In regulated lending it is not a premium feature. It is the baseline the FCA already expects, because a decision no one can explain is a decision no one can defend.

Dawid Kotur
CEO and co-founder, Curvestone
Dawid co-founded Curvestone in 2024 after a decade working at the intersection of financial services and applied machine learning. He writes about the strategic direction of regulated-industry AI, the FCA's evolving approach to model risk, and the operational changes UK lenders are making in response to Consumer Duty. He sits on the FCA Smart Data Accelerator advisory cohort.
LinkedIn