Financial Reporting Rules for AI

The pain AI financial reporting is causing our customers

CFOs and controllers spent 2024 and 2025 dealing with AI at the operational level. Now the auditors are asking about it. External auditors want to know how AI is being used in the financial close, in revenue recognition, in expense classification, in fraud detection. Audit committees want to know how AI use affects ICFR. FASB is updating software cost accounting for AI implementations. AI has moved from the CIO's concern to the CFO's concern, and most finance organizations are still catching up.

What AI financial reporting compliance covers

Four frameworks apply, each addressed in detail on its own page (linked below).

Click into each rule below for detailed compliance guidance.

Why AI financial reporting matters to you

Public companies face SEC and PCAOB scrutiny of AI-related financial reporting. Private companies face lender covenants, insurance underwriter reviews, and M&A diligence that all now touch AI in financial systems. Every credible AI program has a financial reporting dimension that cannot be ignored.

What the research says about financial reporting

The academic literature on financial reporting is ahead of most corporate practice, and it is unusually blunt. Two findings are worth putting in front of any executive who thinks this is a compliance formality.

“AI adoption significantly enhances corporate governance effectiveness and improves risk management”

Shaban, Al-Zaqeba et al., Sustainability (2025)

That is the gap between having AI and governing it. The second finding is the one that tends to change the room.

“The introduction of AI algorithms in public services modifies the chain of responsibility.”

Bracci, Accounting, Auditing & Accountability Journal (2022)

Neither of these is a fringe position. Both come from peer-reviewed work, and both describe the condition most organisations are actually in when the question about financial reporting arrives from the board, the buyer, or the regulator.

How to get compliant with Financial Reporting Rules for AI: a 5-step path

This is the sequence that works, and it is not the sequence most organisations choose. They start with the framework and work backwards toward reality. Start with reality.

1. Inventory the AI in scope. List every AI system that could fall under financial reporting. Record what it does, what decision it influences, what data it touches, and who owns it. You cannot govern AI you cannot name, and almost every organisation we assess is running more AI than its leadership believes.
2. Determine whether you are actually in scope. Work out precisely which of your AI systems and activities financial reporting reaches, and write the determination down with its reasoning. Do this in writing. A documented scope determination, right or wrong, is defensible. An undocumented assumption is not.
3. Assign one accountable owner. Name a person, not a committee, with the authority to stop a deployment. Governance without someone who can say no is documentation, not control.
4. Build the evidence file. Assemble the documentation financial reporting expects: the scope, the risk assessment, the controls, the testing evidence, and the incident record. Assemble it before anyone asks. Reconstructing it under a regulator's deadline costs several times more and looks exactly like what it is.
5. Set a review cadence and hold it. Re-run the assessment on a schedule and after any material change to the model, the data, or the use case. Alignment decays. A control tested once is a snapshot, not a control.

Done in this order, financial reporting becomes tractable. Done out of order, it becomes a document nobody uses and a control nobody exercises.

Frequently asked questions about AI financial reporting

Is our AI in the audit scope?

If it affects amounts recorded in the financial statements or the effectiveness of ICFR, yes.

Where does AI financial reporting fit in SRJ's work?

Volume III of The Operating Discipline for AI Library™ includes financial reporting readiness for AI in the CFO-track addendum.

What each area of financial reporting covers

The detail pages below each take one component of financial reporting and answer the same four questions: what it actually is, what it requires of you, why it matters commercially and legally, and what a defensible position looks like. Read the one that maps to your exposure first. The others become relevant as your AI footprint widens.

• FASB ASU 2025-06. The Financial Accounting Standards Board update on software cost accounting for AI implementations.
• AICPA AI Guidance. The American Institute of CPAs' guidance for auditors on how to assess AI use by clients.
• PCAOB AI Guidance. The Public Company Accounting Oversight Board's guidance on AI in public company audits.
• SOX 302 and 404 for AI. How Sarbanes-Oxley Sections 302 and 404 govern AI in internal control over financial reporting (ICFR).

How to prioritise your work on financial reporting

Executives ask, reasonably, where to start. The sequence that works is the same one every time, and it is not the sequence most organisations choose. Start with an inventory: you cannot govern AI you cannot list, and almost every organisation we assess is using more AI than its leadership believes. Then rank by consequence, not by volume, because the tool that makes one high-stakes decision a week carries more exposure than the one that drafts a thousand emails.

Only then assign an owner. Not a committee, an owner, named, with the authority to stop a deployment. Governance without a person who can say no is documentation, not control. With those three steps done, the specific requirements of financial reporting become tractable, because you now know what you have, what matters, and who answers for it.

The organisations that struggle are the ones that begin with the framework and work backwards toward reality. The frameworks are the map. The inventory is the territory. Start with the territory.

Primary sources on financial reporting

The authoritative texts and agency pages behind this summary. We keep this page current, but where a compliance decision turns on exact wording, read the source. Anything concerning financial reporting that carries legal consequence should be confirmed against the enrolled text or the issuing body, not against a secondary summary, including this one.

• FASB
• PCAOB