AI Governance Institute
← News
Enforcement2026-09-30

SBA's AI Fraud Pilot Never Classified as High-Impact, OIG Finds

Source

SBA's AI fraud detection pilot didn't include needed safeguards, OIG says

U.S. Small Business Administration / Office of Inspector General

What happened

The SBA's Office of Inspector General published findings that the agency's AI-assisted fraud detection pilot was built on Palantir technology. It screened COVID-19 loan program applicants. It was deployed without being classified as a high-impact use case under OMB Memorandum M-26-04: Increasing Public Trust in AI Through Unbiased AI Principles. That classification gap meant legally required protections never activated. No AI impact assessment was completed. No human oversight mechanism was designed, and affected borrowers had no formal appeals process. The OIG also found that the SBA lacked a functioning AI governance board capable of making or recording such determinations. The findings parallel a similar accountability gap found at another federal agency, where high-impact AI was deployed with no testing records in 80% of cases. The OIG issued six recommendations focused on building the governance infrastructure needed to ensure future AI systems are properly identified, assessed, and controlled.

Why it matters

  • ·When no body is responsible for classifying AI systems by risk level, every downstream safeguard required by OMB guidance, including OMB Memorandum M-26-04, fails to trigger. The SBA finding shows this is a governance design failure, not an execution one, and regulators are now naming it explicitly.
  • ·Borrowers screened or denied by an AI system with no appeals process face due process exposure that can become a legal and reputational liability. Any AI tool affecting eligibility, benefits, or financial decisions needs a documented path for people to contest outcomes.
  • ·Federal contractors deploying AI in government programs, including vendors like Palantir, now face heightened scrutiny over whether their tools were subject to required pre-deployment governance steps. Procurement teams should treat OIG findings as signals of where audit attention is heading next.

Stay ahead of stories like this

Get every US AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Governance controls affected

ALC-005Regulatory Audit ReadinessBRD-002AI Governance Committee Charter and Decision RightsHOC-001AI System Risk ClassificationHOC-002Human Approval Gate for Consequential AI DecisionsSCT-008AI-Specific External Complaints and Redress Mechanism

What to do now

  • ☐Review your AI system inventory and confirm that each system has a documented, board- or committee-approved risk classification, specifically identifying which systems qualify as high-impact or high-risk under your applicable framework.
  • ☐Verify that your AI governance committee is operational, has defined decision rights for classifying AI use cases, and is recording those determinations in writing.
  • ☐For any AI system used in eligibility, fraud screening, benefits, or financial decisions, confirm that a formal process exists for affected individuals to question or appeal AI-influenced outcomes.
  • ☐If your organization deploys AI under a federal contract, audit whether the required pre-deployment steps, including impact assessments and oversight mechanisms, were completed and documented before the system went live.
  • ☐Ask your procurement and legal teams to review OIG and Government Accountability Office AI-related findings from the past 12 months and map any cited gaps to your own governance controls.

What to watch next

OIG findings at federal agencies are increasingly functioning as enforcement signals: they expose the specific governance steps regulators expect and will audit against. Compliance teams at federal agencies and their contractors should watch for follow-on OIG audits at other agencies using AI in loan, benefits, or grant programs. This pattern is already visible at the IRS and HUD. The OMB's continued issuance of AI governance guidance means the classification framework will only become more detailed and more enforceable over time.

Related Coverage

Research2026-11-08

Boards Flag AI Ownership Gap as Grant Thornton Survey Finds Controls Undocumented

Grant Thornton's survey of executives and board members found that AI governance and AI use rank among the top sources of anticipated regulatory scrutiny. Board participants specifically identified unclear ownership and decision rights as central problems. The firm urged organizations to document governance processes, maintain AI audit trails, and preserve evidence that controls are actually operating.

Research2026-11-02

AI Agent Performed Live Brain Surgery, Exposing Physical-World Oversight Gaps

A researcher at ExinTx demonstrated an AI agent that independently selected a treatment and synthesized surgical coordinates from published research. The agent then injected a gene therapy vector into a live mouse model of epilepsy. The experiment included a licensed veterinarian holding a physical stop mechanism and volume-capping validators on the injection equipment. Two versions of Claude refused to proceed at different points, raising unresolved questions about how organizations should handle AI refusal behavior when humans can override it.

Corporate Policy2026-10-31

Dartmouth Provost Resignation Exposes AI Disclosure Policy Enforcement Gap

Dartmouth College provost Santiago Schnell resigned after an advisory committee found he failed to disclose AI use in a published academic paper and a Washington Post op-ed. Both publishers required such disclosure. The case reveals a structural gap between having an AI use policy and being able to audit or enforce it.