← All talks

AI Engineer NYC 2026 Main stage · 18 min

Anthropic: Accelerating frontier AI in Financial Services.

Belinda NealAnthropic
Keon ShahabAnthropic

A trade-break agent can investigate a discrepancy without having permission to change the order. Belinda Neal and Keon Shahab show how to reuse that separation across financial workflows.

Capability arrives before adoption

33:09 ↗

A model can cross a capability threshold before a company changes how it works. Belinda Neal starts with that gap: coding moved from autocomplete toward people managing agents, while financial firms are still working out how to turn stronger models into repeatable business workflows.

Choosing a model is only the first decision. Anthropic offers different model families for speed, everyday work, and difficult reasoning. Once a firm has a few agents working, it faces a more expensive question: how does it build the next hundred without rebuilding every integration and control?

Neal describes the progression from chatbots, to pilots with internal knowledge, to agents built individually by hand. Keon Shahab takes up the next stage: many specialized agents operating on a common foundation. His framework separates the context that lets an agent do useful work from the controls that let the organization trust that work. The foundation begins at 38:44.

Follow one trade break through the foundation

39:35 ↗

Start with connectivity. Hand-wiring five agents to five systems creates a growing collection of integrations to maintain. A shared Model Context Protocol, or MCP, connectivity layer gives agents a repeatable way to reach the systems they need. It solves access to the tools and data; it does not, by itself, tell an agent how the business operates.

That operating knowledge lives in skills. Shahab uses a trade-break investigator: an agent examining two records of the same trade that do not match. A subject-matter expert supplies the process for investigating the discrepancy. Although a skill can be plain text, the team should treat it as versioned material that changes with the business, rather than a prompt copied once and forgotten.

Now give the investigator an identity and a role. In the example, its operations-analyst permissions allow it to read order and market data. The CRM remains inaccessible. The distinction is deliberate: an agent performing one investigation should not gain every permission that might be available elsewhere in the firm.

The same distinction applies to writing. The investigator can propose an amendment to an order without being allowed to apply that amendment itself. This is where the approval layer enters the workflow. The agent investigates, prepares the proposed booking change, and brings it to a qualified person. Only after approval does the system apply it.

Follow one order through that handoff. In this illustration, two records disagree about quantity. Preparing an amendment leaves the stored order untouched; the reviewer confirms the proposed quantity before it is applied.

An order stays at 100 units while a 120-unit amendment awaits review. After human approval, the stored order changes to 120.

Illustration of the trade-break approval flow at 42:35; quantities are illustrative.

That sequence matters. A proposal can be examined while the underlying order remains unchanged. Deterministic hooks enforce restrictions around the agent’s actions, so the approval requirement is part of execution rather than merely a sentence the model is asked to remember.

Finally, evaluate changes to the system. A new model or an updated skill may improve some cases and regress others. Business experts help define a set of representative investigations and expected behavior. Engineering can then compare a candidate against the baseline before widening its use. Testing the investigator means checking the whole workflow, including a correct diagnosis followed by an attempt to write without approval.

Business expertise becomes an engineering input

44:04 ↗

The reusable foundation allows each new agent to specialize without inventing another security model. A business team contributes the rules and context for its workflow; engineering provides the shared mechanisms for identity, approval, and evaluation.

Different users can reach those controls through different interfaces:

  • Business users might work through Claude Cowork.
  • Engineers might use Claude Code.
  • Product teams might build their own application with an agent SDK or managed agent environment.

Each still needs an answer to who the agent acts as, who approves its consequential actions, and how to detect a regression after a change.

This also changes the operating model. Users who understand the work can correct an agent or propose improvements directly. Engineering reviews those proposals, tests them against the evaluation set, and ships the accepted change back to the business. The feedback loop makes operational knowledge actionable without treating every user suggestion as an automatically approved production edit.

Reuse the pattern across an industry

47:11 ↗

Neal closes with Claude for Financial Advisors, presented as an application of the same foundation across the wealth-management stack. Advisors need information from CRM, planning, market-data, portfolio, and custody systems. A useful agent must bring those sources together while preserving the advisor’s responsibility for what happens next.

The product combines connectors with an initial set of skills. Meeting preparation can assemble a family’s situation into one brief. Follow-up can turn meeting notes into proposed CRM updates and subsequent work. Neal emphasizes the approval rule: nothing is saved or sent without the advisor approving it.

The reuse happens at the level of real work. A CRM connector can support both meeting preparation and follow-up. A starting skill can be adapted to a firm’s process, saving the team from reconstructing the workflow in an empty prompt. Watch the advisor example at 47:11.

Neal leaves firms with a practical question beyond choosing their next use case: which connectors and skills can they build once so the next team can start further ahead?

Full transcript

Timestamps follow the original livestream. Select a time to watch that moment. Transcripts are machine-generated with reviewed name and terminology corrections; occasional recognition errors may remain.

31:47

morning.

31:48

I'm Belinda and this is Keon and we're from Anthropic.

31:51

We work with financial services firms.

31:55

As Keon gets set up here, we'll start with a little bit of background.

31:58

My name is Belinda Neal, and I'm the Managing Director of Financial Services at Anthropic.

32:03

Previously to joining Anthropic this year, I worked at Goldman Sachs for 19 years across engineering, global markets, and equity research.

32:09

My role at Anthropic sits at the confluence of our industry, our product, our research, and our go-to-market teams,

32:16

really in accelerating the adoption of AI within financial services.

32:20

Keon.

32:21

Good morning, everyone. Thanks for being here.

32:23

My name is Keon Shahab. I'm an Applied AI Architect at Anthropic.

32:26

Prior to Anthropic, I spent five years at Databricks

32:29

helping financial services companies

32:30

modernize their data and AI architecture.

32:34

So we're excited to speak to you this morning,

32:36

and our talk is going to cover three ideas.

32:39

Firstly, the frontier of intelligence.

32:42

How is this room taking the frontier models

32:44

and applying it in ways that create alpha or edge

32:47

within your firm?

32:48

The second is the frontier of adoption.

32:50

How are you scaling what you've built

32:52

based on the foundation of a few to many?

32:54

And then last, how are we applying it to financial services?

32:58

We're going to bring an example in here about how we've been innovating in the wealth industry

33:02

in Claude for financial advisors.

33:03

And that paradigm compounds potentially to other areas of financial services as well.

33:09

So let's get started and talk about the frontier of intelligence.

33:13

So every so often, a model crosses a threshold.

33:16

And when it does, a way of working changes.

33:18

We first saw this encoding last year with Opus 4.5 and Claude code.

33:24

Many of you in the room are using these tools,

33:26

and you've gone from autocomplete encoding

33:28

to managing fleets of agents

33:30

where you're really driving and accelerating

33:32

a multiple effect of how you're doing coding.

33:35

We also saw this threshold cross this year

33:37

in cyber with Claude Mythos Preview,

33:39

and many of you are also spending time

33:41

on the cyber programs in your firms.

33:44

What's next?

33:45

Finance.

33:47

We've started now in finance with early agents

33:49

and bringing Claude into the products and services

33:51

that you use day to day.

33:53

One example here is Citadel told us at our briefing event in May that their investment professionals started to use Claude for Excel, and it gives them a step change function in how they can test, build, and trust their work.

34:06

We're really excited for the potential of Claude within the tools and the use cases that this room is building.

34:13

But here's the challenge.

34:16

Intelligence is ahead of adoption.

34:17

What a model can do on its own is doubling every four months.

34:22

PwC published early this year

34:24

that the capabilities of AI

34:26

are going to three quarters of companies.

34:30

Sorry, three quarters of the economic gains of AI

34:32

are going to a fifth of companies.

34:33

This is what we call the diffusion gap.

34:35

If you're not building close enough to the curve,

34:38

there's opportunity for you to take the frontier

34:40

and be able to apply it in your workflows.

34:43

We work with firms across financial services,

34:46

across our model family,

34:47

most of which hopefully this room is familiar with.

34:50

We have Haiku.

34:51

for speed and volume.

34:53

Sonnet for everyday work.

34:55

Opus as the daily driver for financial services,

34:58

complex tasks, and agentic coding.

35:00

And Fable, our frontier model

35:02

that can effectively be used

35:04

for the hardest work in your firms.

35:06

One example here from Millennium

35:07

on our most recent model blog

35:10

was a PM used Fable

35:12

to find a piece of code

35:13

that had a bug,

35:15

and it was unexplained in five years.

35:17

Fable was able to find it.

35:18

We're starting to see our models get used in this industry in new and creative ways,

35:23

and we believe the frontier of intelligence is just getting started.

35:27

Every model release gets smarter, cheaper and safer, so it's really important to take

35:31

a minute to call out how the model frontier is continuing to develop here.

35:35

Firstly, the intelligence is going up.

35:37

Now a model can work for 16 plus hours on its own.

35:41

This is up from just minutes in 2023.

35:45

In terms of cost per task, it's going down.

35:47

The most recent Opus 5.5 model was 40% more cost-efficient than Opus 5.

35:53

You can also see those impact metrics for Haiku, Sonnet, and Fable.

35:58

And lastly, safety.

35:59

This is something we care a lot about at Anthropic.

36:01

In the most recent model of Fable 5.1, only 1% of propped injection attacks were successful.

36:08

This is relative to other frontier models in the region of 9% to 53%.

36:11

So we're really investing in safety alongside capability at Anthropic.

36:16

And the banks know this.

36:17

The last most recent Evident AI 2026 report that came out last week showed us that banks are 26% ahead of their AI maturity scores.

36:26

We're really investing in scaling in applying this technology to our industry.

36:30

A few use cases to call out from this report, which are publicly citable use cases that have been reported, is firstly on areas like fraud.

36:38

One bank found that with auto loans, they were able to reduce $120 million of potential fraud in 12 months.

36:45

In another area, in post-earnings research,

36:48

a draft of a report was able to be generated in 15 minutes relative to 45 minutes.

36:53

And you can see other use cases here and more broadly across the industry

36:56

as we start to talk about the value of AI and the impact we're generating on our business.

37:02

So where are we?

37:03

In 2023, we built chatbots.

37:06

Everyone was asking a question and going backwards and forwards with the model.

37:09

In 2024, we brought pilots to firms

37:12

and we started to get more knowledge bases and data into these AI systems.

37:17

From 2025 to now, we're now building agents.

37:20

And in the most case in this room, we're building them hand by hand, one by one.

37:24

And our opportunity here to scale is not the model.

37:27

Our opportunity here to scale is building the foundation for agents that can go from one to many.

37:32

So the next part of the talk, we wanted to spend time focusing on how you can build the agent foundation

37:37

that will allow you to scale the frontier of adoption.

37:40

So over to you, Keon.

37:42

Amazing.

37:42

Thank you, Belinda. So, Belinda, as you've just said, there's no better time than now to start

37:47

experimenting and building with agents. For this portion of the talk, we want to talk a little bit

37:51

about how you can go from that experimentation phase towards productionizing and scaling agents.

37:58

But first, some observations that we've seen across the industry. A year ago, we could think

38:03

about this as the year of exploration, where engineers were working on a handful of use cases.

38:09

They were in POC and pilot mode.

38:11

And they took their learnings and transitioned that into this year,

38:14

where we've seen this be the age of production.

38:18

So we've seen these handful of agents go to production.

38:21

A lot of them have been built by hand.

38:23

What I think will happen next year is we'll go into the age of scale.

38:26

We'll have many agents built on one solidified foundation.

38:34

And as Belinda just mentioned,

38:36

the models are now the easiest part of the equation here.

38:39

We know that the models can handle high-quality tasks,

38:42

and we're confident about that.

38:43

But what we want to talk about here

38:45

is building this five-layer framework

38:47

for scaling and productionizing your agents.

38:50

Starting from the bottom,

38:51

we first want to look at what the agent can do.

38:54

So we can give it context for our business use cases

38:58

via connectors so that it can reach our systems and data.

39:01

Then we want to give it context

39:02

for our actual business rules and processes via skills.

39:06

Once that's done, we want to think about building the trust layer for the agents.

39:10

We can think about that in three general steps.

39:13

Who the agent is acting as with an identity and permissions layer, how we can sandbox and

39:19

determine the approval layer of the agent so that someone is signing off before it acts,

39:24

and lastly, how we know the agent will still work once we adjust any variables over time.

39:30

So let's look at each of these five.

39:34

Perfect.

39:34

So if you've started building agents already, you may think of giving those agents access to your underlying systems and data, manually wiring them by hand to a handful of different source systems.

39:46

And that could work for maybe five agents and five systems.

39:49

Then you'll have 25 systems to maintain and manage.

39:53

But as you think about scaling up your agents into new specialized various tasks,

39:59

you'll

40:00

want to have those agents work off of one secure connectivity layer, which is MCP. That'll make it a lot easier for you to build at scale with one repeatable framework. Next, let's say now we have the agent have context to our underlying business data and systems. Now we want to give it more context to

40:25

into our actual business rules and processes.

40:27

And that's done through skills.

40:29

And this is where the SMEs that really do the work

40:31

and understand the process and the work come into the picture.

40:35

And from here on, we're going to look at an agent use case

40:39

for a trade break investigation agent.

40:42

And we're going to follow this across for the next steps.

40:45

In this case, a trade break agent is meant to look at two records

40:49

of a single trade that don't match.

40:52

And here you can see steps one through three.

40:54

a little bit of a simplified version,

40:56

but this is the business context that an SME provides.

40:59

And we think about skills as living, breathing, versioned code, essentially,

41:05

even though they're just plain text.

41:06

They're meant to be dynamic.

41:08

They're meant to be updated frequently.

41:12

All right.

41:13

So now we have our context layer for the agent.

41:16

We have the agent having access to our source systems and data.

41:20

We have the agent that understands how to go from a generalized model to a specialized agent with skills.

41:27

Now we want to talk about building the trust layer with that agent.

41:31

And first, let's start with the identity and permissions layer.

41:34

So here you can see the identity of the agent.

41:37

We're going to assign it.

41:38

It's going to be the trade break investigator.

41:40

We're going to give it a role with permissions called ops analyst.

41:43

And you can see here, once that agent needs to go and reach our source systems,

41:47

like our order data and our market data, it'll have permission to read.

41:50

But if it tries to go reach for our CRM data, it'll be denied.

41:54

And we will do that on purpose so that it won't overreach for sources of data that it shouldn't have access to.

42:00

And lastly, we don't necessarily want this agent to perform on behalf of us.

42:04

We want it to just propose new amendments to our orders data, not actually make those amendments.

42:09

And that's where we'll look at on the next slide how we can keep the human in the loop here.

42:15

All right. So this is kind of the layer of who signs off before the agent acts, right?

42:21

Many of you have heard the term sandbox. We can use that terminology here as well

42:25

for putting an approval layer around the agent so that you can see here the four-step process.

42:32

The agent will actually go and propose a booking amendment. It'll actually try to

42:37

proceed through the process with the context that it has and the source systems and data

42:42

that it has access to, but then it'll look for a human, an SME, someone in the loop,

42:47

in the process, to approve.

42:50

Once they approve, then that amendment will be made and the change will be applied.

42:55

This is the layer where you can also put deterministic guardrails called hooks around your agent

43:01

so that it's never overreaching beyond what you would like it to do within its confines.

43:08

All right.

43:09

So now we have a full agent.

43:11

Let's say it's in production.

43:12

It's working great.

43:14

And let's say that we want to make an adjustment to this agent.

43:17

Let's say that a new model is shipped,

43:20

or we want to make an adjustment to the business context layer with the skills.

43:25

How do we actually know if these adjustments are improving the agent

43:29

or if they're causing a regression?

43:32

So that's our evals layer.

43:34

This is where your SMEs, your business users who are in the loop,

43:38

who understand the process help determine a set of test cases

43:43

to test the agent against with a benchmark or a baseline

43:47

so that once you apply any change to any variable,

43:50

you'll be able to determine whether that variable change

43:53

actually improved the behavior of the agent

43:56

or if it caused it to regress, as you'll see here in some of the examples.

44:02

All right.

44:03

So hopefully you've seen, by building once,

44:07

with a foundational layer that you trust,

44:10

you can work at speed to deploy many agents at scale.

44:16

For us, financial services and regulated industries

44:19

doesn't mean slow.

44:20

It means that we're seeing a lot of innovation

44:22

from the financial sector,

44:23

and we're seeing it go hand-in-hand

44:25

with security and safety as well.

44:28

And those three layers that we just walked through,

44:31

who the agent is acting as, who signs off,

44:34

and how you still know that agent works,

44:36

are the key components of building a safe and secure agent framework.

44:43

And once you have this framework that you've built,

44:46

you can use it to apply to any new agent that you want to build

44:49

for any specialty use case.

44:51

So you can see at the top, you'll have your foundation.

44:54

And then at the bottom, you'll see where you can actually

44:56

bring in more specialty along the way as you continue to scale.

45:01

That specialty is worked in combination with the business and engineering

45:05

to make sure that the proper business rules and context

45:09

are being integrated into the agent workflow.

45:15

And you might be wondering,

45:17

we haven't mentioned anything like Claude Code yet.

45:19

Well, everything that we've talked about so far

45:22

has, let's say, four different doors

45:24

that you can access it from.

45:25

So a business person can access it from Claude Cowork,

45:29

an engineer can access it from Claude Code,

45:32

or you can take this to the next step

45:35

and give the agent more work to do in your own UI environment

45:39

via things like managed agents or agent SDK.

45:46

Now, so far we've talked about building a secure,

45:51

trustable agent foundation framework.

45:54

Now let's talk a little bit about the operating model.

45:56

Some observations that we've seen,

45:59

especially in financial services,

46:01

is that the business is now becoming closer to engineering.

46:05

And the way that we're observing this is that the business will directly work with the agent that engineering has built.

46:11

They'll have direct capabilities to correct that agent or amend it, propose adjustments,

46:17

and that's where engineering is in the loop as well.

46:20

Once you see the list of proposed adjustments, you can solidify that as a scale change

46:27

after you've reviewed and tested all that within your eval framework.

46:31

And then anything new that you ship goes right back to the business, and they'll go through the same loop again to continuously improve the overall agent and the process.

46:43

All right.

46:44

So far we've talked about building the agent framework in a way that you can build once for scale.

46:51

And we've talked about how you can turn a generalized, highly intelligent model into a specialized agent.

46:58

Now I want to hand it off to Belinda to talk a little bit more about what we're seeing in the industry

47:02

by building some of the foundations ourselves for the next step here, which is Claude for Financial Advisors.

47:10

Thank you, Keon.

47:11

So what you've just seen is us building a foundation once in a firm.

47:15

Now I want to talk about how we could take that same approach to our industry.

47:19

This foundation we've built in Claude for Financial Advisors,

47:22

and whilst you might not all in the room sit in the wealth or the advisor space,

47:26

I want you to take this as a pattern and an opportunity to start to think about how we can actually coordinate at an industry level.

47:33

So in September, we launched Claude for Financial Advisors, the orchestrator across the stack of an advisor.

47:38

This was built on the foundation that advisors only spend approximately 20% of their time with clients.

47:44

We wanted to find a way where advisors could spend more time with clients and more time growing their franchise.

47:50

So what did we do?

47:51

We went through the agent foundation and found ways to scale.

47:54

At layer one, we brought connectors in.

47:58

The industry system, the deterministic numbers,

48:01

and the scaled system that advisors trust,

48:03

we brought into the ecosystem.

48:05

Layer two, we built skills.

48:07

We built a plugin that is available on GitHub

48:10

that builds eight skills and workflows

48:12

that an advisor can take out of the box,

48:15

use today, and amend for tomorrow.

48:17

Layer four, approval.

48:19

The advisor approves everything that comes out of Claude.

48:22

Nothing is saved or sent without the advisor.

48:24

and that trust principle holds here too.

48:27

And so you can see here on the diagram on the left,

48:30

CRM, market data, custodians,

48:32

all the tools and foundations and advisor needs

48:34

brought into Claude.

48:35

So let's go through layer one, the connectors.

48:38

We brought in 25 platforms across custody,

48:42

portfolio, planning, data, and CRM,

48:45

names such as Schwab, Adapar, Salesforce, and more.

48:49

And there's more connectors that you can find

48:51

on the Claude marketplace.

48:52

This is where the industry builds once

48:54

the advisor can integrate once, and this is what compounding looks like.

48:59

Layer 2 skills.

49:00

These are the workflows we built for the advisor

49:03

that they can start with and adjust and amend to their own firm.

49:06

For example, pre-meeting prep allows an advisor

49:09

to bring a full family plan into one brief across multiple systems.

49:13

The follow-up allows the advisor to bring those meeting notes,

49:17

enter them into the CRM system,

49:19

and actually follow through the existing systems and tools.

49:23

Nothing goes out until the advisor approves it.

49:26

And this skill foundation is a baseline

49:27

of which we imagine advisors will start to innovate

49:30

and bring Claude into more and more of their workflows,

49:32

allowing them to drive impact in their business.

49:36

So, in closing, with 28 seconds on the clock,

49:40

three questions to take to your firm today.

49:43

The first one is the workflow.

49:45

How are you applying the frontier intelligence to your firm?

49:48

How are you gaining edge and alpha from the frontier models today?

49:52

The second is the foundation.

49:54

Do you all have a foundation that you trust

49:57

for building and scaling agents for the future

50:00

as things become more and more specialized?

50:02

One connector. How are you actually building the foundations that others can use? Are you building connectors and skills for your users, for your firm, and for the industry?

50:12

With that, thank you so much for having us. Enjoy the rest of the conference.