AI Governance Institute
← News
Enforcement2026-09-30

SBA's AI Fraud Pilot Never Classified as High-Impact, OIG Finds

Source

SBA's AI fraud detection pilot didn't include needed safeguards, OIG says

U.S. Small Business Administration / Office of Inspector General

What happened

The SBA's Office of Inspector General published findings that the agency's AI-assisted fraud detection pilot was built on Palantir technology. It screened COVID-19 loan program applicants. It was deployed without being classified as a high-impact use case under OMB Memorandum M-26-04: Increasing Public Trust in AI Through Unbiased AI Principles. That classification gap meant legally required protections never activated. No AI impact assessment was completed. No human oversight mechanism was designed, and affected borrowers had no formal appeals process. The OIG also found that the SBA lacked a functioning AI governance board capable of making or recording such determinations. The findings parallel a similar accountability gap found at another federal agency, where high-impact AI was deployed with no testing records in 80% of cases. The OIG issued six recommendations focused on building the governance infrastructure needed to ensure future AI systems are properly identified, assessed, and controlled.

Why it matters

  • ·When no body is responsible for classifying AI systems by risk level, every downstream safeguard required by OMB guidance, including OMB Memorandum M-26-04, fails to trigger. The SBA finding shows this is a governance design failure, not an execution one, and regulators are now naming it explicitly.
  • ·Borrowers screened or denied by an AI system with no appeals process face due process exposure that can become a legal and reputational liability. Any AI tool affecting eligibility, benefits, or financial decisions needs a documented path for people to contest outcomes.
  • ·Federal contractors deploying AI in government programs, including vendors like Palantir, now face heightened scrutiny over whether their tools were subject to required pre-deployment governance steps. Procurement teams should treat OIG findings as signals of where audit attention is heading next.

Governance controls affected

HOC-001AI System Risk ClassificationHOC-002Human Approval Gate for Consequential AI DecisionsBRD-002AI Governance Committee Charter and Decision RightsALC-005Regulatory Audit ReadinessSCT-008AI-Specific External Complaints and Redress Mechanism

What to do now

  • ☐Review your AI system inventory and confirm that each system has a documented, board- or committee-approved risk classification, specifically identifying which systems qualify as high-impact or high-risk under your applicable framework.
  • ☐Verify that your AI governance committee is operational, has defined decision rights for classifying AI use cases, and is recording those determinations in writing.
  • ☐For any AI system used in eligibility, fraud screening, benefits, or financial decisions, confirm that a formal process exists for affected individuals to question or appeal AI-influenced outcomes.
  • ☐If your organization deploys AI under a federal contract, audit whether the required pre-deployment steps, including impact assessments and oversight mechanisms, were completed and documented before the system went live.
  • ☐Ask your procurement and legal teams to review OIG and Government Accountability Office AI-related findings from the past 12 months and map any cited gaps to your own governance controls.

What to watch next

OIG findings at federal agencies are increasingly functioning as enforcement signals: they expose the specific governance steps regulators expect and will audit against. Compliance teams at federal agencies and their contractors should watch for follow-on OIG audits at other agencies using AI in loan, benefits, or grant programs. This pattern is already visible at the IRS and HUD. The OMB's continued issuance of AI governance guidance means the classification framework will only become more detailed and more enforceable over time.

Stay ahead of stories like this

Get every US AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Related Coverage

Corporate Policy2026-10-06

Utah Healthcare AI Sandbox Sets a Governance Template With Real Teeth

Utah's Office of Artificial Intelligence Policy has signed master agreements with Intermountain Health and University of Utah Health to test AI tools in clinical settings under the state's regulatory sandbox. Three new pilots covering dermatology, postpartum physical therapy, and prescription refills were approved, each with third-party evaluation and human oversight requirements. The initiative was revised after the Utah Medical Licensing Board criticized an earlier version for insufficient stakeholder input.

Corporate Policy2026-09-30

White House Deploys Gemini-Powered Chatbot for Citizen Services, Raising Hallucination Liability

The White House has launched America.gov, a public-facing AI chatbot built on Google's Gemini model, designed to help citizens navigate federal government services. The system handles queries on topics such as food assistance, visa renewals, and taxes. Inaccurate answers could cause citizens to miss deadlines, lose benefits, or face penalties. This raises direct questions about accountability, reliability controls, and governance of federal deployments.

Corporate Policy2026-10-08

AVEVA's Industrial AI Framework Sets a Human Oversight Benchmark for OT Operators

AVEVA's chief technologist has outlined a responsible AI framework for industrial deployments that explicitly limits where automated systems can act without human approval. The framework positions AI as a support tool rather than a decision-maker in critical process loops, with defined boundaries on autonomous action. AVEVA is also contributing to an IEEE working group developing a standard way to measure AI's environmental impact.