ACA Releases 2025 AI Benchmarking Report
In November, ACA released its second annual AI benchmarking report covering data gathered in September 2025 from 244 individuals. The survey found that 2025 was the year of “accelerated AI integration” with the number of firms using AI increasing by 20 percentage points from 2024, with 71% of firms now reporting formal AI use. The most common use-cases for AI among survey respondents were investment research and diligence (64%), compliance and risk management (49%), and marketing and communications (44%). The survey also notes that AI presents firms with unique challenges and risks, particularly for CCOs and technology leaders. Top concerns include:
- Data Privacy Risks
- Information Security Risks
- Hallucinations
- Regulatory and Compliance Risks
- Cybersecurity
- Third Party Vulnerability
The report breaks down each of these risks and offers suggestions for firms to think about mitigating the risks. Regarding the third-party AI use, the survey found that “[o]nly 24% of firms have policies and procedures in place to govern third-party AI use, and over half of respondents have neither of these policies currently in place, nor plans to establish those policies in the near future.” Additionally, firms still report having difficulties identifying which third-party vendors use AI. The report notes that in order to strengthen third-party AI risk management, firms should consider the following:
- Inventory AI Use Across Vendors
- Develop Policies and Procedures to Manage Use
- Enhance Due Diligence Measures
- Monitor and Audit Third-Party Use of AI
The report notes that the next phase of AI use will likely focus on “scaling successful use cases, enhancing governance structures to meet evolving regulatory expectations, and working with business leaders to ensure the responsible use of AI tools.”
Click here to download the report from the ACA website.