Does the AI employee tell customers it is an AI, and can they ask for a person?
- Yes. The AI employee says it is an AI at the start of every call, and any customer who wants a person is transferred with the identity check and the conversation attached. The Central Bank's Guidance Note on AI, issued on 11 February 2026, expects banks to tell customers when they are interacting with AI and to let them ask for a human review of a decision the AI made. Disclosures run in Arabic and English, and the rest of the call can carry on in the customer's own language, one of the 90+ the AI employee speaks.
How does the AI employee verify a caller before sharing account details?
- With the check your bank already uses on the phone, such as an approval request sent to your banking app. No balance, card or account detail is shared until it passes, and a failed check is passed to your team. On calls the bank makes, the AI employee does not ask for a PIN, a password, a card number or a one-time code, in line with the fraud warnings UAE banks give their customers.
Can the AI employee approve credit, waive a fee or refund a disputed charge?
- No. Those decisions sit outside the permissions it holds, so they reach your team even when a customer presses for an answer on the call. For a transaction the customer does not recognise, it records the date and time and the customer's own words, explains the options the Consumer Protection Standards require, from blocking the card while the bank investigates to cancelling and replacing it, and sends the case to your disputes team. The refund is decided by that team, within the time the Standards allow.
When does the AI employee make collections calls, and what does it say?
- Between 09:00 and 20:00, the hours the Central Bank's Consumer Protection Standards allow for calls about arrears, and no more often than your policy sets. Each call names the bank and its collections team, gives the number and working hours for calling back, and names the AI employee. When nobody answers, it leaves a message so the customer can call the same number back. Every call is recorded for your files, which the Standards require you to keep for five years after the debt is settled or written off, and hardship, disputes and requests to restructure go to your collections team with the recording.
Can the AI employee call customers with product offers?
- Only within telemarketing your board has approved in writing, and only to customers whose consent covers calls from AI agents, under the Central Bank's Telemarketing Regulation, in force since 31 March 2026. Calls run between 09:00 and 18:00, at most once a day and twice a week, with no further call about a product the customer refused or did not answer. Each call opens with the bank's name and the purpose, tells the customer they can complain to the bank or to Sanadak and can register with the Do Not Call Registry, says the call is recorded and asks whether now is a good time. Which products may be offered by phone is a decision for your compliance team.
Where is the call data kept?
- Inside the country. The Central Bank's Consumer Protection Standards require banks to hold customer and transaction data in the UAE, and the UAE's federal data protection law leaves personal banking data to banking legislation such as these Standards. Recordings, transcripts and call logs are held in the UAE, each person's access is set by role and logged, and your data is never used to train shared models.
Does it work for Islamic banks?
- Yes. The AI employee uses the terms your Shari'ah function approves, such as finance, instalment and profit rate, and quotes rates and fees only from the product's Key Facts Statement. A customer who doubts a product's Shari'ah basis is passed to your internal Shari'ah function, which the Consumer Protection Standards require Islamic banks to make available.
How soon can a bank go live with an AI employee?
- xAIa's deployments went from pilot to production in 30 days. A bank can build and test its first queue, such as the lost-card line or payment reminders, while its outsourcing, security and vendor reviews run, go live on its existing numbers once they are signed off, then add the next queue after the first has proved itself on real calls.