M&T Bank has deployed AI copilots to more than 15,000 employees as the US regional bank applies AI to internal operations, customer service, software development, and risk management.

The bank uses AI to analyse call-centre conversations, draft reports, generate code, identify customer needs, and flag portfolio risks, according to Fast Company. M&T is also examining agentic AI applications in cybersecurity and fraud detection.

American Banker reported in September 2025 that 16,000 of M&T’s roughly 22,000 employees were already using Microsoft Copilot for tasks including drafting emails and reports and summarising call-centre conversations.

Before the wider rollout, M&T initially restricted employee access to public large language models. Chief data officer Andrew Foster told American Banker that the bank blocked the tools because employees could potentially enter sensitive company information into public-facing services.

M&T later evaluated enterprise providers and selected Microsoft Copilot, starting with a pilot involving about 800 employees before expanding access across the organisation.

Foster said using generative AI to summarise call-centre conversations saves about six minutes per call. Software developers at the bank also use GitLab tools to generate code, while employees remain responsible for reviewing AI-generated work.

M&T’s human-review requirement is also reflected in its 2026 Code of Business Conduct and Ethics. The policy requires employees to use approved AI tools and prohibits confidential, proprietary, customer, employee, or regulated information from being entered into unapproved systems. Employees remain responsible for the accuracy and appropriateness of AI-assisted work.

Building the technology and data foundation

M&T’s AI deployment follows a technology overhaul that began in 2018. The bank said more than half of its technology specialists were external workers at the time, compared with an 80% in-house technology workforce today.

M&T now has about 2,000 technologists working across more than 300 agile teams and has hired more than 1,000 technology specialists during the programme.

The bank has also replaced dozens of older platforms. M&T said technology outages have fallen by more than 80% since 2018, while the number of system upgrades completed annually has increased by 300%.

Technology spending exceeded $1.2 billion in 2025, nearly three times its 2017 level. Wisler told Forbes in August 2026 that annual technology releases increased from about 15,000 in 2018 to 65,000 in 2025.

Wisler joined M&T as chief information officer in 2018 before becoming senior executive vice-president for technology and operations in 2025. His current remit covers both technology and operational functions across the bank.

M&T’s data programme developed alongside the broader technology overhaul. Foster, who joined the bank in 2023, began building a data-lineage programme to track where information originates, how it is used, and how it moves between systems.

Foster told American Banker that the data-lineage work was not created in response to generative AI. He described it as a core capability for understanding M&T’s data estate.

The bank also established a Data Academy focused on data governance and data skills, with around 2,000 employees participating in the programme.

M&T has created an internal repository called Edison containing authoritative documents and information on bank policies. The bank also uses data-lineage software from Solidatus and Monte Carlo to trace information as it passes through databases, applications, and business-intelligence systems.

The lineage work gives M&T visibility into the source, meaning, quality, and governance of individual data elements, according to Foster. He said one application for that governed data is the bank’s use of Copilot.

M&T also uses retrieval-augmented generation with internal, governed data, according to American Banker.

Scaling AI into daily banking operations

Wisler told Forbes that M&T is pursuing generative AI through three routes: general employee use, AI capabilities embedded in existing applications, and proprietary systems built around the bank’s own data and processes.

M&T operates more than 1,800 applications, many supplied by third-party vendors. Wisler said one of the bank’s AI pathways is identifying useful AI capabilities already embedded within those applications.

M&T’s third pathway involves proprietary AI development around the bank’s own data and processes. Forbes reported that early applications include repetitive operational work, software development, fraud prevention, and cyber defence.

Fast Company’s September report also said M&T continues to assess both internally developed AI systems and external tools, including general enterprise software and technology designed specifically for banks.

Earlier workforce use cases centred on drafting, summarisation, call-centre work, and software development. Fast Company reported that newer applications include identifying customer needs and flagging portfolio risks.

Other large US banks have also expanded generative AI across employee workflows.

JPMorganChase launched its internal LLM Suite platform to more than 200,000 employees in 2024. By 2025, more than 65,000 employees in its Corporate and Investment Bank were actively using the platform, while more than 90% of its engineers were using AI coding assistants.

The bank also said AI-based transaction screening allowed it to review more than twice the previous transaction volume while reducing manual operator checks by half.

Bank of America is using a generative AI-enabled system called EricaAssist with more than 18,000 customer service employees. The tool summarises why a customer is calling, retrieves relevant information, and recommends possible next steps while keeping the employee responsible for the interaction.

Bank of America said in July 2026 that EricaAssist can deliver contextual guidance in under three seconds and has reduced average call times by nearly one minute. The bank plans to extend the system to additional servicing scenarios and business lines later in 2026.

(Photo by Alain Pierre-Lys)

See also: Bank of England reviews AI rules for agentic AI in finance

Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events, click here for more information.

AI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.

The post M&T Bank expands enterprise AI after years of technology overhaul appeared first on AI News.

The AI and Big Data programme on day two of TechEx North America referred at least once to the “AI graveyard,” meaning the large number of pilots that never become durable systems. That phrase set the tone. The question was proof.

The Enterprise AI Implementation, ROI and Adoption track dealt with the hard middle of AI work. Its sessions covered stalled pilots, agentic AI for business impact, the move from experimentation to impact, the decision to buy or build, and durable ROI and autonomous decisioning. A system has to be adopted, governed and measured before it deserved to be called successful.

The session on the AI graveyard was useful because it named the failure pattern. Many companies have enough budget to start AI experiments and enough executive attention to publicise them. Fewer have the data quality, process design, operating authority, and risk control to keep them going.

A day-two session on moving beyond copilots towards agentic AI framed the issue as business impact not novelty. Copilots have been useful as individual productivity tools, but their value is often hard to measure. Agents promise a closer connection to business process, yet they also increase the need for boundaries. An agent that can act in systems has to be evaluated by the quality of the action.

That point linked directly with the Future of AI track. Its opening theme, trust as a competitive advantage, was a useful counterweight to speed. The programme dealt with transparency, governance, regulation, banking analytics, and risk. It also included material from Hex on data agent, with evaluation and governance built in. Agentic AI will not mature in enterprise settings if evaluation remains informal.

Governance appeared in several forms. There was cross-functional governance, which reflects the reality that AI risk does not belong to legal, security or engineering. There was governance in the data layer, where trust depends on lineage and quality. There was governance around agent personas and risk stacks, where companies need to understand what an AI agent is permitted to know and do. The banking session gave the theme a sectoral focus, since financial services have less room for undefinedassurances about automation.

Digital Transformation Week carried the same day-two pressure into business delivery. The programme was built around real use cases, business impact, ROI, AI agents built on APIs, change readiness, government service transformation, city innovation and the conversion of data into financial value. The change-readiness material was especially important. AI fails because staff do not change routines, managers do not alter incentives, or the data needed for daily use never appears in the right place.

Sessions involving the DMV and the City of San Jose placed AI and transformation inside government service. In government, the measure of quality includes reliability, access, explainability and public trust. The Dow material on turning data into dollars sat at the commercial end of the same argument. In both cases, value depends on connecting data work with an accountable outcome.

The Cyber Security and Cloud Expo day-two programme expanded on risk. Its cloud-first enterprise track dealt with AI-led threats, cloud security, the “GenAI velocity gap,” threat intelligence, identity security and AI governance. The cyber programme treated AI as a force that changes attack and defence alike. It can help automate defensive work, but it can also accelerate misuse, widen leakage routes, and increase the strain on existing controls.

The phrase “velocity gap” was used several times during day two. Business units are adopting generative AI faster than many security teams can oversee it: the tools arrive first, policy and monitoring arrive later. The sessions on jailbreaking and data leaks made the point more concretely. If staff place sensitive material into unsanctioned tools, or if approved AI systems are poorly bounded, cloud security and data governance become one and the same.

Zero trust was presented as one answer, with a stronger interpretation of zero trust must now include AI systems, agents, and the data around them. Identity is not limited to human users, but services, agents and automated workflows require permission models as well. The cloud-first enterprise is therefore becoming a place where identity, data classification, AI governance, and threat detection are part of the same control mechanisms.

 

(Image source: TechEx/TechForge)

 

Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and co-located with other leading technology events. Click here for more information.

AI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.

The post Proving the case on day two at TechEx North America appeared first on AI News.