Skip to content
Bluejayders
System 03 · Financial services · Regulated RAG

Morgan Stanley — AI @ MS Assistant, AskResearchGPT & Debrief

The reference case for enterprise RAG under supervision. Morgan Stanley built its first proof of concept in September 2022 — before ChatGPT existed — and the most valuable published detail is not the architecture but the evaluation methodology, which became the firm's reusable governance artefact that every new AI use case must satisfy.

>98%of FA teams using it
20 → 80%document access
10–15 hrssaved per FA per week
9 monthspilot before GA
500question regression suite
~5,000/daylive annotations
It is RAG, not fine-tuning

Early 2023 press described “fine-tune trained GPT-4 on 100,000 documents.” Kaitlin Elliott, Head of Firmwide GenAI Solutions, corrected this on record: “After a while of experimenting, we realized that we had built what is now RAG, but we didn't know what RAG was.” Draw a retrieval pipeline, not a training pipeline.

Azure OpenAI is not confirmed

Every primary source points to a direct OpenAI relationship: MS was a GPT-4 launch organisation and the only strategic wealth-management client, ZDR was negotiated bilaterally, and they sat with OpenAI to co-tune retrieval. Do not put Azure on this diagram.

Two products, two corpora

The WM Assistant (~100k internal docs) and AskResearchGPT (ISG, 70k+ research reports/yr) are separate systems on separate corpora — not one product with two front doors.

L1

System context

Four products, one content discipline, and in 2026 a genuinely new pattern: opening the platform to clients' own autonomous agents over MCP, bypassing the human UI entirely.

morgan stanley — L1 system context
USERSAI PRODUCTSCONTENT & RETRIEVALENTERPRISE SYSTEMSEXTERNALFinancial advisors~16,000 FAs>98% of FA teams use the Assistant10–15 hrs/week saved (CEO)Institutional Securities staffInvestment Banking · Sales & Trading· ResearchDevelopers15,000 across the firmAI @ MS Assistant /AskResearchGPTGPT-4 over INTERNAL content onlytwo separate systems, two corpora~3x query volume of the old toolAI @ MS DebriefWhisper transcription + GPT-4~30 min saved per meetingGA 26 Jun 2024DevGen.AI (Jan 2025)reads COBOL / PL-I / Perl and emitsPLAIN-ENGLISH SPECS, not code9M lines · 280,000 dev-hours savedSingle curated contentrepositoryONE owning teampre-existing KM tagging + freshnessResearch corpus (ISG)70,000+ proprietary reports/yearWM content corpus~100,000 internal documentsseparate corpus from ISGVector storeproduct NEVER disclosedchunking, embedding model, top-k:also never disclosed?MS at Work: ShareWorks / EquityEdge$1.2T workplace assetsZoomclient meeting recordingwith client consentSalesforce CRMDebrief auto-saves the meeting noteOutlookfollow-up email draftsControl partnersModel Risk Management · Legal ·Compliance · AI Steering Committeeco-chaired by the Global Dir. of ResearchOpenAI — direct relationshipGPT-4 + WhisperZERO DATA RETENTION negotiatedMS was a GPT-4 launch orgClients' own autonomous agentsMCP into ShareWorks / Equity Edge~3,400 stock-plan clients plannedfirst major bank to do thisRAG retrievaltranscript inmeeting note outemail draftGPT-4 · ZDRWhisper + GPT-4eval gate beforelaunchagent-to-system,no human UI
drag to pan · scroll to zoom · click any box
actorapp / surfaceagent / reasoningmodel callstore / indexexternal systemguardrail / trustplatform / gatewaypipeline / evalnot shippeddashed = inferred— api call— data— llm call— human loop— guardrail— escalation— external
McMillan's own system-context diagram, in one sentence

“we envision a world where AI serves as an efficiency enhancing interaction layer that sits between our colleagues and the many applications they interact with such as execution and order entry, CRMs, reporting tools and risk analysis.”

2026: agent-to-system access

Mark Mitchell, CPO of MS at Work: “In the future state, our corporate clients will not be logging into ShareWorks or Equity Edge. Instead, they will use agentic AI tools within their own companies to interact with Morgan Stanley's platforms in a purely agent-to-system manner.” First major Wall Street bank to do this.

L2

Component view — RAG pipeline, controls and the eval loop

The eval column on the right is not an afterthought — it gates the retrieval column on the left. Every change to search rules or prompts re-runs the 500-question regression suite, and a broken recency rule in production was caught by daily annotation trending, not by an alert.

morgan stanley — L2 components, controls and evaluation
CONTENT & INGESTIONRETRIEVALORCHESTRATIONGENERATION & OUTPUT CONTROLSEVALUATION & GOVERNANCEKnowledge management programmepre-dates the AI workcontent already tagged; freshness managedSingle curated repositorycompliance-reviewedone owning teamResearch corpus (ISG)70,000+ reports/yearWM corpus~100,000 documentsChunking + embeddingstrategy, embedding model, chunk sizeand top-k: NEVER disclosed?Vector storeproduct never named?Per-advisor entitlements filterUNSOURCED at Morgan Stanley.Confirmed substitutes: a curatedcorpus + separate WM/ISG corpora?Business-rules layer over searchdate / recency filtersdifferent content types havedifferent currency requirementsRetrievalmethods CO-TUNED with OpenAI:'what can we change about ourretrieval methods to help accuracy'Reranking / hybrid BM25 / queryrewritenot disclosed?Compliance archive (WORM)SEC 17a-4 / FINRA 3110 obligationsare real — MS has never publishedits approach?Topic routerdetermines the topic, then selectsthe content-type-specific modelContent-type sub-modelse.g. investment-researchrecommendation contentPrompt guardrailsextended multi-turn DISALLOWEDtopics restricted to business issuesfew-shot examples engineered inOpenAI GPT-4direct relationship — NOT Azurezero data retentionCitation / reason-codeenforcementevery answer carries a reason codelinking to its source documentAskResearchGPT hyperlinks themHuman reviewadvisors review and adjust beforefinalising — architectural, not optionalnothing goes direct-to-client yetPatented one-click workflowtransfers findings into an emaildraft, ready to customisebefore sharing with clients500-question regression suitere-run against EVERY change tosearch rules or promptsLive annotation~100 questions/day human-graded→ ~5,000/day hybrid human + AIrubric: accurate · complete · rightsourceDaily trend monitoringdeviation from range = break signalFailure taxonomyinaccurate · incomplete · hallucinated· wrong source retrievedControl partnersModel Risk Mgmt · Legal · Compliancethe eval framework itself becamethe reusable governance artefactgrounded chunkssupervision recordsampled trafficgates every change
drag to pan · scroll to zoom · click any box
actorapp / surfaceagent / reasoningmodel callstore / indexexternal systemguardrail / trustplatform / gatewaypipeline / evalnot shippeddashed = inferred— api call— data— llm call— human loop— guardrail— escalation— external
The eval that convinced leadership

A 25-question head-to-head: AI versus a human subject-matter expert, both given one hour. “The AI was able to answer all 25 questions in an hour, and the humans weren't.” Framing used with control partners: human performs the task at ~40%, AI at ~80%.

An eval approach that failed

1,000 questions scored by cosine similarity. Elliott: “we realized it literally told us nothing.” They replaced it with SME and end-user grading, with failures bucketed thematically.

What is genuinely not published

Vector store product. Chunking strategy, embedding model, chunk size, top-k. Reranking or hybrid search. Per-advisor entitlements filtering. The compliance archive design. All five are drawn dashed.

REF

The six-layer stack from the person who built theirs

Jeff McMillan led Firmwide AI at Morgan Stanley, then left and published this. It is his framework rather than an internal MS diagram — but it is the highest-fidelity public proxy available, and it maps cleanly onto the L2 diagram above.

mcmillan — six-layer enterprise ai stack
JEFF MCMILLAN'S SIX-LAYER ENTERPRISE AI STACK (MAR 2026)his framework, published after leaving MS — the closest public proxy for how they…L6 — Applicationsthe surface users actually touchL5 — Agentic / Orchestrationplanning, tool use, multi-step workL4 — AI Modelsfoundation and fine-tuned modelsL3 — Controls & Governanceaccess control · compliance ·guardrails · audit trailsL2 — Data Modelknowledge graphs · RAG · vector DBsL1 — Data“There is no Layer 6 without Layer 1.”Evaluation & Observabilitya HORIZONTAL spanning all six layersnot a stage at the endobserves everylayer
drag to pan · scroll to zoom · click any box
actorapp / surfaceagent / reasoningmodel callstore / indexexternal systemguardrail / trustplatform / gatewaypipeline / evalnot shippeddashed = inferred— api call— data— llm call— human loop— guardrail— escalation— external
L3a

Critical path — advisor asks a research question

morgan stanley — AskResearchGPT sequence
ARTIFACT / DETAILAdvisorBusiness rules + retrievalTopic routerOpenAI GPT-4Citation checkEmail workflowresearch question1Baseline being replaced: an FAQ-based assistant that tookyears to build 10,000 FAQs and answered only 10–20% ofquestions asked.determine topic2e.g. "investment research" → selects the sub-model tunedon recommendation content.scoped retrieval request3Corpus is division-scoped: ISG queries hit the researchcorpus, WM queries hit the WM corpus. Separate systems.apply business rules (recency,date)4Recency is first-class: analyst ratings must be thelatest; trust-structuring content is time-invariant.grounded prompt + few-shot examples5Guardrails: extended multi-turn conversations disallowed;topics restricted to business-relevant issues.draft answer6Zero data retention: "the OpenAI team's willingness toensure zero data retention has been really impactful" —David Wu.attach reason codes +hyperlinks7Every answer links back to its source document.AskResearchGPT hyperlinks citations to the underlyingresearch.cited answer8~1/10th the time to respond to a client inquiry vs theprevious tool.one click → email draft9A Morgan Stanley PATENTED workflow: single-click transferof findings into an email draft, ready to modify beforesharing with clients.sample ~100/day for annotation10Human-graded against a rubric: good/bad, complete,accurate, correct article retrieved, better articleavailable. Scaling to ~5,000/day.
drag to pan · scroll to zoom
actorapp / surfaceagent / reasoningmodel callstore / indexexternal systemguardrail / trustplatform / gatewaypipeline / evalnot shippeddashed = inferred— api call— data— llm call— human loop— guardrail— escalation— external
L3b

Critical path — Debrief: client meeting to CRM to draft email

The interesting constraint here is that Debrief does process client PII — it transcribes real client meetings. Consent and zero data retention are the compensating controls, and nothing leaves without an advisor pressing send.

morgan stanley — Debrief sequence
ARTIFACT / DETAILAdvisorZoom meetingWhisperGPT-4Salesforce CRMOutlookobtain client consent, startrecording1Consent is the gate. Debrief transcribes ACTUAL clientmeetings — so "no client PII reaches the model" is falsefor this product. ZDR is the compensating control.audio stream2Whisper is confirmed by OpenAI's own customer story.transcript3Eval datasets are built per meeting type, testingaction-item capture without introduced errors.summarise + extract actionitems4~30 minutes of notetaking saved per meeting, per a namedadvisor testimonial.auto-save meeting note5Salesforce is a confirmed integration. Microsoft Teamsappears only in secondary aggregators — treat asunconfirmed.draft follow-up email6Draft only. Never auto-sent.present for review7"Advisors review and adjust AI-generated outputs beforefinalizing them." Human-in-the-loop is architectural.edit + send at advisor's discretion8Elliott: "There are obviously some use cases that youwant to be consistently right all the time, for example,if you were going direct to a client, which we haven'tdone yet."
drag to pan · scroll to zoom
actorapp / surfaceagent / reasoningmodel callstore / indexexternal systemguardrail / trustplatform / gatewaypipeline / evalnot shippeddashed = inferred— api call— data— llm call— human loop— guardrail— escalation— external
DATA

Confirmed numbers

MetricValueSource
FA team adoption of the Assistant98% (OpenAI says >98%)MS press release / OpenAI
Answerable scope growth7,000 questions → 100,000-document corpusDavid Wu, OpenAI story
Document access20% → 80%OpenAI story
Time saved per FA10–15 hrs/weekCEO Ted Pick, Reuters
Debrief notetaking saving~30 min per meetingNamed FA testimonial
Research corpus70,000+ proprietary reports/yearMS press release
AskResearchGPT query volume~3× the predecessor toolCNBC
Client-inquiry response time~1/10thCNBC
DevGen.AI, 5 months9M lines of code · 280,000 dev-hours saved · 15,000 developersWSJ
Prior FAQ assistant (the baseline)years to build 10,000 FAQs; answered only 10–20% of questionsElliott, Scale AI