Firms face rising AI compliance risks, says Theta Lake

Theta Lake

A new report by Theta Lake has uncovered widespread AI adoption across enterprises — yet significant gaps remain in compliance and governance capabilities.

The company’s seventh annual Digital Communications Governance Report found that 99% of organisations are now using AI within workplace communications, creating a surge in what Theta Lake defines as “aiComms” — a new class of communication where AI-generated content interacts with human participants.

However, 88% of respondents said they face governance and security challenges linked to this rapid AI expansion, exposing firms to new regulatory and data protection risks.

The findings reveal that 47% of firms see ensuring the accuracy and compliance of AI-generated content as their greatest challenge. Beyond AI, the study highlights structural inefficiencies in communication governance. Around 82% of firms use four or more unified communication and collaboration (UCC) platforms, while on average, companies now rely on six tools. This fragmentation is compounded by the fact that most organisations depend on at least three separate vendors or repositories for recording, archiving, and monitoring communications.

The report also found that 62% of firms struggle to reconstruct or replay conversations spanning multiple tools during investigations, while 41% face challenges in migrating on-premise voice recordings to secure cloud infrastructure. A further 67% expressed concern about employees using off-channel communication methods, which could lead to regulatory breaches and fines.

Theta Lake CEO and co-founder Devin Redmond said, “It is clear from this data that trying to build onto legacy DCGA technology implementations to address compliance for modern communication tools is not working for compliance teams. Firms are using UCC tools more than ever with communications that span multiple tools and include textual, voice, and visual content, while now increasingly including AI generated communications and agents. The current state of siloed, inflexible voice and eComms compliance solutions, repositories, and processes is too complex, overly expensive, and incompatible with the reconciliation, investigation, supervision, and surveillance required. The exponentially increasing volume and meshed nature of these communications that also now include AI participants and content requires a unified, AI and Cloud-native DCGA platform delivered with independently verified and certified trust.”

The research coincides with Theta Lake’s recognition as the furthest in Vision in the Gartner® Magic Quadrant™ for DCGA Solutions, where it was assessed among 14 vendors. Analysts have echoed the company’s findings. Metrigy president and principal analyst Irwin Lazar said, “Preliminary results from our annual workplace collaboration and contact center security and compliance global study of more than 300 organizations shows that more than 65% of companies plan to increase their spending on security and compliance in an attempt to keep up with growing AI threats. More than 90% of organizations have established, or plan to establish, a dedicated security and compliance strategy for AI.”

Polling 500 senior IT, compliance, and UCC leaders from financial services firms across the U.S. and U.K., the report underscores an urgent need for unified, cloud-native compliance infrastructures capable of capturing and supervising eComms, vComms, and the growing category of aiComms.

Download the report here.

Find more on RegTech Analyst.

Keep up with all the latest FinTech news here

Copyright © 2025 FinTech Global

Enjoying the stories?

Subscribe to our daily FinTech newsletter and get the latest industry news & research

Investors

The following investor(s) were tagged in this article.