At Gusto, I balance AI-driven automation with human oversight by adopting a "human-in-the-loop" framework. I utilize AI tools to manage high-volume, repetitive compliance tasks—such as regulatory change tracking, initial risk identification, and data monitoring—to improve speed and scalability. However, these automated workflows serve as a force multiplier, not a replacement for judgment. I implement rigorous validation controls, conducting manual review and audit of AI-generated outputs to ensure accuracy and contextual nuances are captured. By embedding quality control checkpoints and subject-matter expert oversight at critical decision points, I ensure that our compliance program remains both efficient and robust, maintaining strict accountability and regulatory alignment in our fast-paced financial services environment.

To measure success in regulatory change management for this role, I focus on four key performance indicators:

1. Regulatory Coverage & Timeliness: Tracking the percentage of new regulatory requirements identified, assessed, and communicated to internal stakeholders within defined SLAs.
2. Implementation Efficacy: The time elapsed from a regulatory change announcement to the successful implementation of updated controls and documentation.
3. AI-Augmentation ROI: Measuring the efficiency gain in mapping new regulations to existing controls using AI tools, while maintaining a 100% accuracy rate for human-in-the-loop validation.
4. Audit & Exam Readiness: Sustaining zero "findings" or "material gaps" during internal audits or external regulatory examinations related to the timely adoption of compliance updates.

The industry is evolving toward a "compliance-by-design" framework, heavily leveraging AI to manage the complexity of embedded finance. As companies integrate banking services, compliance is shifting from manual, siloed processes to automated, AI-driven workflows. This transformation includes real-time regulatory change management, proactive risk identification, and scalable control testing.

Leading firms like Gusto are increasingly adopting "AI-native" compliance, where technology acts as a force multiplier for human expertise. By automating monitoring and documentation, teams can better navigate complex regulatory landscapes—such as TILA, Reg E, and NACHA rules—across diverse partnerships. This evolution allows businesses to maintain strong, human-in-the-loop oversight while accelerating responsible innovation and ensuring durable growth within the fintech ecosystem.

The Legal & Compliance team at Gusto acts as a strategic partner to Product and Engineering, directly enabling innovation by translating complex financial regulations into actionable, scalable compliance workflows. By embedding themselves into the development cycle, team members provide essential guidance on product launches, partnerships, and marketing initiatives. They leverage "AI-native" methodologies—using tools like ChatGPT and Claude—to automate monitoring, accelerate regulatory change management, and strengthen risk controls. This proactive, service-oriented approach allows the company to balance rapid growth with rigorous compliance. By balancing automation with "human-in-the-loop" oversight, the team ensures that Gusto delivers durable, responsible, and compliant financial solutions that empower small business owners across the nation.

The most pressing compliance challenge for the Gusto team is effectively scaling their Compliance Management Program to support rapid innovation in complex financial offerings, such as embedded finance, lending, and payments. As they expand these services, they must maintain regulatory rigor across diverse requirements—including TILA, TISA, ECOA, and NACHA rules—while operating as an "AI-native" team. The core tension lies in integrating AI tools to automate monitoring, regulatory change management, and risk identification while ensuring robust human-in-the-loop oversight. Balancing high-speed product growth with strict adherence to consumer protection laws and partner bank expectations requires them to translate intricate regulatory frameworks into precise, automated, and scalable controls without compromising accuracy or accountability.