A governance crisis is quietly unfolding across global enterprises: according to the PEX Report 2025/26, only 43% of organisations have implemented a formal AI governance policy. This means the majority of firms deploying autonomous AI systems are operating without any documented framework for accountability, risk thresholds, or performance oversight. In the context of financial services, legal and accountancy sectors regulated by the FCA, SRA and PRA, this gap represents a fundamental violation of Senior Management & Certification Regime (SMCR) and Consumer Duty PS22/9 expectations.

Deloitte's 2026 State of AI in the Enterprise report compounds this concern with two alarming findings: only 1% of companies describe themselves as AI-mature, and 73% of AI deployments fail to deliver return on investment. The implication is stark—most organisations have neither the governance maturity to deploy AI responsibly nor the operational discipline to measure whether it actually works. This is not a technology adoption problem; it is an organisational control failure with direct implications for regulatory compliance and shareholder value.

The disconnect between deployment velocity and governance maturity creates cascading risks. Autonomous AI systems making decisions about customer treatment, credit assessment, or claims handling without documented oversight frameworks expose firms to regulatory action under SMCR principles requiring senior management accountability. Consumer Duty expectations mandate that firms demonstrate they understand the risks their AI systems pose to customers and have controls in place. A formal governance policy is not optional bureaucracy—it is a regulatory prerequisite for lawful AI operation.

Financial services, legal and accountancy firms subject to FCA SYSC rules and Consumer Duty requirements must recognise that 73% ROI failure rates and 43% governance gaps represent industry-wide warnings, not isolated incidents. Trovix relevance: Trovix Aria provides the foundational AI governance framework and documentation required to meet regulatory expectations, assess current governance maturity, define risk tolerance and performance thresholds, and create an auditable record of how autonomous AI systems are approved, monitored and governed. The governance crisis is an opportunity to move from ad-hoc AI adoption to structured, compliant deployment.