Where Claude fits in advice, compliance and client work

Two professionals reviewing documents together at an office desk
TL;DR

Claude can handle the documentation-heavy work surrounding regulated advice, including first-draft reports, file reviews, client correspondence, and financial modelling. It cannot hold the regulated judgement: an authorised person must review, approve, and take responsibility for anything that constitutes a personal recommendation under FCA rules. UK GDPR obligations, NCSC security guidance, and Consumer Duty communications standards all apply when client data is involved.

Key takeaways

- Claude is useful in regulated advice firms for drafting first-cut reports, checking files against policy, generating plain-English client explanations, and handling inbox and admin work, but the regulated decision must always have a named human responsible for it. - The FCA has confirmed that adopting AI does not reduce a firm's existing regulatory obligations; boards remain responsible for governance, systems, and controls, and treating customers fairly. - Client data fed into Claude falls under UK GDPR, with the firm as data controller; a lawful basis, data minimisation, and an updated privacy notice are required before you start. - The NCSC advises treating API-based AI services as cloud suppliers and conducting a supplier risk assessment, with specific precautions against prompt injection when Claude is connected to CRM systems or shared drives. - The most practical entry point for small advice firms is document generation and file review within tools already in use, particularly Microsoft 365, where Claude integrates with Excel, Word, and Outlook.

An independent financial adviser runs a lean practice: two advisers, one paraplanner, and a compliance manager who reviews file quality once a quarter. Half of every adviser’s week goes on preparing and checking the documents that surround the advice, not the advice itself. That is the space where Claude is most useful in a regulated professional services firm.

What does Claude actually do in advice and compliance work?

Claude is being used as a drafting and review assistant in regulated services, handling the documentation-heavy work that sits around advice rather than the advice itself. It can produce first-draft suitability narratives, check advice letters against internal policies, generate plain-English client explanations, and summarise fact-finds from unstructured notes. A human adviser still makes the regulated judgement, but Claude handles the groundwork.

Private equity firm Carlyle adopted Claude as a core part of its AI stack for complex financial analysis, including due diligence and modelling from unstructured documents, with Carlyle reporting that Claude for Excel meaningfully automates complex analysis with minimal prompting. For smaller advice firms, the applications are similar in shape but smaller in scale: building models, auditing formulas, and pulling client data together before a meeting.

The more significant development for compliance-heavy firms is the move towards end-to-end case handling. Anthropic and AML platform Eliza are building agents that compress anti-money laundering investigations from days to minutes, handling data gathering, pattern analysis, and report drafting, with a human making the final call. That workflow, AI doing the legwork and a human making the determination, is the structure advice firms should be building towards.

Why does this matter for a professional services firm?

Professional services margins are eaten by admin. A financial planner spending a day a week on compliance paperwork, an accountant generating client reports by hand, a consultant recreating slide decks for each new engagement: these are costs that cap capacity without showing up cleanly in a P&L. Claude addresses exactly these bottlenecks, at the point between client meetings where document-heavy work accumulates.

The UK government’s decision to partner with Anthropic signals where official comfort with Claude-class tools is settling. The Department for Science, Innovation and Technology selected Anthropic to build an AI assistant for GOV.UK to help citizens access work, training, and employment support. Anthropic engineers work alongside Government Digital Service teams so the government retains independent control rather than depending on a single provider. The combination, AI handling information-processing and humans retaining control of outcomes, is the model professional services firms should adopt.

Anthropic has also built out “Claude for Small Business” with connectors for QuickBooks, PayPal, HubSpot, DocuSign, Google Workspace, and Microsoft 365, plus fifteen pre-built agentic workflows covering finance, operations, sales, HR, and client service. For a five-person advice firm, that means accessible integration rather than a custom development project.

Where will you actually meet Claude in client-facing work?

The practical touchpoints cluster around the Microsoft 365 and Google Workspace tools your firm already uses. In Excel, Claude builds financial models and audits formulas. In Word, it edits advice letters against your templates. Via Outlook, it drafts client emails in your tone and triages inboxes. Context carries across apps, so you don’t re-explain a client’s situation each time you switch tools.

Beyond the core apps, the most concrete entry point for smaller advice firms is probably automated document generation. Using Claude with Word and e-signature tools such as DocuSign, you can generate engagement letters, fee disclosures, and suitability-style narratives from structured inputs, then route them for human review and sign-off. The FCA’s record-keeping rules require that firms keep adequate records of services and client communications; an automated document pack with a clear human-approval step meets that expectation more consistently than a manual process running from someone’s inbox.

For compliance and file review, Claude can act as an internal checker, comparing advice letters against your documented processes and flagging missing disclosures or inconsistencies. The FCA expects firms to have appropriate systems to monitor advice quality; AI-assisted file checks can contribute to that when a human makes the final assessment.

When should you hold Claude back from regulated decisions?

The FCA’s perimeter guidance draws the boundary clearly: a personal recommendation on a regulated investment or product is a regulated activity, and responsibility for it cannot be delegated to an AI tool. Claude can prepare the groundwork, draft the narrative, and flag inconsistencies, but an authorised person must review, take responsibility, and approve the advice before it reaches the client. Skip that step and the firm is exposed.

Data protection is the second area where care is needed before client information goes into any AI tool. The ICO’s guidance on generative AI requires a lawful basis for processing personal data, data minimisation, and purpose limitation. Financial data is sensitive by nature. If you’re inputting client details into Claude, you are the data controller and UK GDPR obligations apply fully. That means documenting the lawful basis, updating client privacy notices, and considering whether a Data Protection Impact Assessment is required before you start using Claude on live client files.

The NCSC advises treating API-based AI services as cloud suppliers and applying the same due diligence process you would for any other cloud dependency. There is also a specific risk around prompt injection, where malicious content in documents or web pages could manipulate an AI tool into leaking data or taking unauthorised actions. Any firm connecting Claude to a CRM system or shared drive should use allow-lists and ensure a human reviews high-risk actions before they execute.

Consumer Duty adds a third consideration. The FCA requires that client communications are ones clients can genuinely understand. AI-generated letters and explanations need to meet that standard, which means review rather than a quick sign-off.

What else do you need alongside Claude in a compliant setup?

Claude is one component in a setup that also requires clear governance, documented processes, and human accountability at every regulated touchpoint. The FCA has confirmed that adopting AI does not change a firm’s existing regulatory obligations: boards remain responsible for governance, systems, and controls. The tools are useful; the framework around them is what keeps the firm on the right side of the regulator.

Four things belong in a governance checklist for any advice firm introducing Claude. First, treat Claude as an assistant rather than an adviser: it prepares material, humans make regulated decisions. Second, keep records of what the AI produced and what a human approved, to satisfy FCA record-keeping requirements under SYSC 9. Third, apply data protection by design: minimise the client data sent to AI tools, document the lawful basis, and update privacy notices before you start. Fourth, put testing and monitoring in place around any use that touches consumer outcomes, and ensure clients have a clear route to complain if something goes wrong.

UK firms serving EU clients should also be aware of the EU AI Act, which places transparency and documentation obligations on AI systems used in regulated contexts. The UK is not bound by the Act, but dual-regulation overhead is real for firms with cross-border client relationships.

The ICAEW has reminded accountants specifically that client confidentiality obligations continue when using cloud and AI services, and that due diligence on data location and access controls is part of that obligation. The same principle applies across any regulated professional services context where client information changes hands.

Sources

- Anthropic (2025). "Agents for financial services." Reports Claude's deployment at Carlyle for complex financial analysis and the Eliza AML case study, compressing anti-money laundering investigations from days to minutes. https://www.anthropic.com/news/finance-agents - TechRadar (2025). "Anthropic reveals Claude for Small Business." Covers the 15 pre-built agentic workflows and integrations with QuickBooks, DocuSign, and Microsoft 365 for SMEs. https://www.techradar.com/pro/we-are-committed-to-helping-business-owners-harness-ai-more-fully-and-effectively-anthropic-reveals-claude-for-small-business-to-help-close-the-gap-using-ai - FCA (2022). "FG22/5: Final guidance on Consumer Duty." Sets out FCA expectations that client communications must be ones customers can genuinely understand, relevant to AI-generated correspondence. https://www.fca.org.uk/publication/finalised-guidance/fg22-5.pdf - FCA. "Perimeter Guidance Manual (PERG 8): Financial promotion and advice." Defines what constitutes a regulated personal recommendation and sets the boundary for unauthorised advice, directly relevant to AI-assisted advice workflows. https://www.fca.org.uk/handbook/PERG/8/ - FCA. "SYSC 9: General rules on record-keeping." Sets out record-keeping obligations for advice firms, including documentation of services and client communications affected by AI use. https://www.fca.org.uk/handbook/SYSC/9/ - FCA and Bank of England (2023). "FS2/23: Artificial intelligence and machine learning." Joint feedback statement confirming that existing regulatory obligations apply to AI use in UK financial services, with boards remaining responsible for governance and controls. https://www.fca.org.uk/publication/feedback/fs2-23.pdf - ICO. "Data protection and generative AI." Guidance on lawful basis, data minimisation, and purpose limitation when processing personal data through generative AI tools. https://ico.org.uk/for-organisations/guidance-and-resources/ai/generative-ai/ - NCSC (2023). "Using AI services securely." Advises treating API-based AI services as cloud suppliers with supplier risk assessments, plus specific guidance on prompt injection risks for connected AI tools. https://www.ncsc.gov.uk/guidance/using-ai-services-securely - ICAEW. "Artificial intelligence and the accountancy profession." Reminds accountants that client confidentiality obligations continue when using cloud and AI services, with due diligence required on data location and access controls. https://www.icaew.com/technical/technology/artificial-intelligence - The Tech Founders (2024). "UK Government Partners with Anthropic to Build AI Assistant for GOV.UK." Reports the DSIT partnership, including Anthropic engineers working alongside Government Digital Service teams so the government retains independent control. https://thetechfounders.co.uk/news/anthropic-partners-with-uk-government-to-build-ai-assistant-for-gov-uk/

Frequently asked questions

Can Claude draft suitability letters for a regulated advice firm?

Claude can produce a first draft of a suitability-style narrative from the fact-find and client data, benchmarked against your internal policies. The FCA still requires an authorised adviser to review, take responsibility, and approve the letter before it goes to the client. Claude handles the groundwork; the regulated judgement stays with the human.

What are the data protection risks of using Claude with client data?

If you feed client data into Claude, you are the data controller under UK GDPR and all standard obligations apply: you need a lawful basis for processing, data minimisation, and an updated privacy notice. The ICO's guidance on generative AI sets this out clearly. For higher-risk uses, a Data Protection Impact Assessment is likely required before you start.

Does the UK government's use of Claude mean it is safe for regulated firms?

The UK government partnered with Anthropic to build an AI assistant for GOV.UK, with engineers working alongside civil servants so the government retains independent control. That is an encouraging signal, but government advisory navigation is a different regulatory context from FCA-regulated advice. Regulated firms still need to apply their own FCA and ICO obligations, regardless of how widely Claude is used in the public sector.

This post is general information and education only, not legal, regulatory, financial, or other professional advice. Regulations evolve, fee benchmarks shift, and every situation is different, so please take qualified professional advice before acting on anything you read here. See the Terms of Use for the full position.

Ready to talk it through?

Book a free 30 minute conversation. No pitch, no pressure, just a useful chat about where AI fits in your business.

Book a conversation

Related reading

If any of this sounds familiar, let's talk.

The next step is a conversation. No pitch, no pressure. Just an honest discussion about where you are and whether I can help.

Book a conversation