Aipedia: Wealth managers and discretionary fund managers

AI vendors and outsourcing in wealth firms

Aipedia, by the Apex broking team · Last reviewed 2026-10-30

When an outsourced AI tool fails, the wealth manager remains responsible to clients and the regulator under SYSC 8.1.6R. With over 92% of discretionary firms outsourcing, vendor contracts and recovery rights are central to managing AI risk.

Part of: AI in Wealth managers and discretionary fund managers

In short

Many wealth firms may get AI through suppliers: portfolio systems, reporting providers and screening vendors. The FCA's 2026 survey found over 92% of discretionary firms outsource, and SYSC 8.1.6R and the October 2026 good-practice page keep responsibility for outsourced AI with the firm. When a vendor error harms clients, the client claims against the firm and PI usually responds, subject to the wording. Recovery from the vendor depends on liability caps, indemnities and whether the firm has waived rights that its insurer would otherwise use.

How wealth firms outsource AI

The FCA's Wealth management survey report 2026 found over 92% of discretionary firms outsource part of their business, mostly technology, execution, assurance and oversight. AI usually arrives through those relationships: a portfolio management system adds optimisation features, a reporting provider adds generative drafting, a screening vendor adds machine-learning matching. A firm may adopt AI without a separate decision, because a supplier switched it on.

That matters because the FCA's governance expectations attach to the use, not the procurement route. If a reporting system starts drafting commentary with generative AI, the firm needs an owner for that use, a view of how outputs are checked, and a record of when it started. The Bank of England and FCA 2024 survey found 46% of financial firms reported only a partial understanding of the AI they use. Third-party models can make this harder: the firm sees the output but not how it was produced.

The duties that apply

Responsibility stays with the firm: SYSC 8.1.6R provides that a firm outsourcing critical or important functions remains fully responsible for its regulatory obligations.
FCA expectations: the October 2026 good-practice page states that firms deploying AI remain responsible for consumer outcomes and that outsourced AI remains the firm's responsibility.
Resilience and third parties: the March 2026 Regulatory Priorities: Consumer Investments report highlights operational and cyber resilience and oversight of material third parties.
Records: SYSC 9.1.1R; the firm must be able to evidence decisions made with vendor tools.

What can go wrong

Vendor-side risks include an unannounced model update that changes outputs, an outage during a rebalance or reporting cycle, a data error in a feed used by many firms, and client data used to train a vendor's model without permission. Where wealth firms share the same suppliers, one vendor fault can affect several firms at once.

Illustrative scenario: a portfolio system provider releases an update to its AI-assisted rebalancing module. A change in how it handles pending corporate actions causes some client portfolios to be rebalanced on incorrect holdings. The firm compensates affected clients and then seeks to recover from the vendor, only to find the contract caps the vendor's liability at a fraction of the loss and excludes consequential loss.

Recovery from vendors versus PI

When a vendor error causes client loss, the client claims against the firm, not the vendor. PI usually responds to the client's claim, subject to the wording, because the firm remains responsible for the service. The firm or its insurer may then try to recover from the vendor. Key points:

Liability caps: vendor contracts often cap liability at fees paid and exclude indirect loss; negotiate caps that reflect realistic client loss.
Indemnities: seek indemnities for data protection breaches and errors in the vendor's own processing.
Waivers: agreeing to waive rights against a vendor can prejudice an insurer's recovery rights; some policies restrict this, so check before signing.
Vendor insurance: ask whether the vendor carries its own PI or technology errors cover.

More detail is in AI contract clauses, indemnities and insurance.

Practical controls

Keep an inventory of every AI feature in outsourced systems, including those switched on by default.
Require notice of material model changes and the right to test before release.
Restrict vendor use of client data for training, and check data processing terms.
Test exit and fallback plans for critical tools.
Assign a named owner for each vendor AI use, as the FCA expects.
Map vendor dependencies in rebalancing and MPS workflows.
Record vendor use for renewal, as in what to document about AI use for PI.

How Apex helps

Apex arranges PI for wealth managers and discretionary fund managers. A broker can review your PI alongside key vendor contracts, including waivers of recovery rights and how cyber cover treats vendor incidents. See does PI cover wealth managers' AI errors and AI in wealth management.

Sources

Frequently asked

If our vendor's AI makes an error, who is liable to the client?

The firm. SYSC 8.1.6R keeps the firm fully responsible for outsourced functions, and the FCA says outsourced AI remains the firm's responsibility. The firm may then seek recovery from the vendor under the contract.

Will PI pay a claim caused by a vendor's AI error?

Usually, if the client claims the firm provided its service negligently, subject to the wording. The insurer may seek to recover from the vendor, so avoid contract waivers that prejudice those rights without checking the policy.

Does cyber insurance cover a vendor outage?

Some cyber policies include cover for losses from an outage at a named or unnamed supplier, often called dependent business interruption, but many do not or limit it. Check the wording and how it interacts with PI if clients claim for losses caused by the outage.

What contract terms matter most for AI vendors?

Liability caps, indemnities for data and processing errors, notice of model changes, data use restrictions, audit rights and exit arrangements. Caps limited to fees paid rarely reflect the client losses an AI error can cause.

Check your PI covers how you use AI

Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.

Start a PI quote Request a callback

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.