AnswersFinancial services
In short
Banks use AI on two fronts. Inside the institution, agents work on servicing, operations, compliance and reporting, governed and auditable. At the front door, customers now bring their own AI agents, and the institutions that come out ahead will let them in deliberately: verified agents, scoped mandates instead of shared passwords, clear liability, agent-aware monitoring and customer controls.
| Element | What it means |
|---|---|
| Verified agents | The bank knows which agent is acting and who operates it. |
| Scoped mandates | The customer grants specific permissions, amounts and time limits, with no password sharing. |
| Clear liability | Rules for who is responsible when an agent authorizes a payment. |
| Agent-aware monitoring | Fraud and risk systems that recognize agent behavior and flag what is unusual. |
| Customer controls | Customers see, change and revoke what each agent may do. |
On its third-quarter earnings call on Oct 13, 2026, JPMorgan said it was blocking services that use customers' passwords to reach its systems, while still allowing read-only access through data connectors. Bank of America, Citi and Schwab set similar limits within days. Restricting first was reasonable; the next step is a sanctioned way in.
The work that suits agents is the work that can be checked: servicing requests against policy, operations exceptions against the ledger, compliance reviews against the rules, and reporting against the source data. Each runs with approvals on consequential actions and a full record for examiners. Fig runs these agents on CosmOS inside the institution's own cloud account or Fig's, connected to core systems in place, with every action in an exportable audit trail.
Showcase: real-time customer intelligence →Security & governance →
Most agents were logging in with customers' passwords and could move money with no way for the bank to verify the agent or limit what it did. Banks blocked that while they design a safer way in.
Yes. Fig runs inside the institution's own cloud account or Fig's, with data, permissions and audit records staying under the institution's control.
They expect the same things as for any model or vendor: governance, explainable decisions, controls on what the system can do, and records that examiners can review.
Dream big, build fast, and grow far with Fig