Every autumn, the people who run compliance programs at fund shops, broker-dealers, and clearing houses read the same document and ask the same question: where is the examiner pointing next? On Thursday, the U.S. Securities and Exchange Commission handed them the answer, and two phrases stood out from the page that were not there a year ago — “super intelligence” and “tokenization.”
The SEC’s Division of Examinations published its Fiscal Year 2027 examination priorities on 23 October, laying out eight areas where its examiners will concentrate across a register of more than 34,000 firms — investment advisers, broker-dealers, clearing agencies, transfer agents, funding portals, and the rest. Most of the list is the perennial work of a securities regulator. The two newest lines are the ones that matter to anyone building on-chain finance.
“Examinations are one of the Commission’s most important tools for promoting compliance with the federal securities laws and helping protect investors,” SEC Chairman Paul S. Atkins said in the announcement. “Examinations provide critical insight into emerging risks, evolving business practices, and market developments across our financial system.”
A Phrase That Was Not in Last Year’s Document
To see what changed, you have to read the year-ago edition against this one. The FY2026 priorities, published in November 2025 under the same chairman, made no standalone mention of cryptocurrency or digital assets, and its technology section spoke of “AI” and “artificial intelligence” — automated investment tools, trading algorithms, and what the agency called misrepresentations of a firm’s AI capabilities. The FY2027 version swaps that vocabulary for a sharper term: “super intelligence,” or SI.
The release names it plainly among the eight priority areas: “Emerging technologies, including super intelligence and other advanced technologies that may affect market operations, compliance, fraud prevention, and investor protection.”
It is not a stray mention. The phrase runs through the full priorities document, which opens by noting that “registrants are increasingly incorporating super intelligence (SI) into their businesses” — using “generative SI tools to support research, drafting, coding, and client communications, as well as advisory and portfolio management functions, and compliance monitoring and surveillance.”
The deeper the document goes, the more concrete it gets. Under “Emerging Financial Technology,” the Division writes that “registrants are increasingly using super intelligence (SI) in core business operations and systems, including investment analysis, customer management, and code development” — and, in the same breath, that “threat actors are using SI to automate and accelerate cyberattacks.” The examiners name the specific attack patterns they will probe for: “SI-generated phishing messaging and synthetic or deepfake voice and video used for social engineering.”
That is the tell that this is not a checklist of buzzwords. The Division is telling firms it will examine their defenses against a threat that did not exist in the last decade’s exam playbook — deepfaked voice and video aimed at moving money.
Tokenization Comes Back Through a Side Door
Tokenization’s return is just as deliberate, and just as quiet. Where the FY2026 edition had no crypto category at all, the FY2027 priorities restore the concept under a different frame: market structure rather than “digital assets.”
The seventh priority area reads, verbatim: “Risks associated with evolving market infrastructure, including Treasury clearing reforms, tokenization, and related developments.” A second mention appears in the section on Regulation SCI — the rules that govern the systems of exchanges and other critical market infrastructure — where examiners “will focus on emerging trends, including SI, tokenization of securities, extended trading hours, and quantum computing.”
Reading the two documents side by side makes the shift measurable. A year ago, the Regulation SCI section named exactly two things: incident response, and how SCI entities manage third-party vendor risk. This year it names four: SI, tokenization of securities, extended trading hours, and quantum computing. Tokenization went from absent to on-the-record in twelve months.
What the Eight Priorities Actually Say
The eight areas, in the agency’s own order, are: investment advisers’ fiduciary obligations, conflicts of interest, recommendations, and compliance programs; retail investor protection, especially around complex, higher-risk, and illiquid products; private funds, private credit, and other complex strategies; broker-dealer financial responsibility, trading practices, supervision, and anti-money-laundering compliance; operational resiliency, cybersecurity, and customer-information protection; emerging technologies including super intelligence; evolving market infrastructure including Treasury clearing and tokenization; and oversight of self-regulatory organizations and other critical market participants.
That is the full list — no crypto section, no digital-asset silo. The Division chose to fold tokenization into infrastructure and let “super intelligence” carry the technology banner. It is a framing decision, not an oversight: a regulator telling the market that it now treats tokenized securities as a problem of market plumbing rather than a problem of a particular asset class.
Keith Cassidy, the Division’s director, described the posture in the announcement: “The markets we oversee continue to evolve rapidly, and the examination program must evolve with them. Our approach enables us to adapt to changing market conditions, identify developing risk patterns, respond to emerging threats, and anticipate areas where investors and the markets may be vulnerable.”
Why the Disclaimer Matters
None of this creates new law. The priorities document opens with a disclaimer that the statement “has no legal force or effect: it does not alter or amend applicable law, and it creates no new or additional obligations for any person.” The Commission itself has neither approved nor disapproved the staff’s content.
The practical effect is still real, and compliance teams treat it that way. Exam priorities are where the Division says it will spend its time, which means the questions firms will actually be asked in 2027 — about how they custody and value tokenized assets, whether their vendor systems qualify as SCI systems, and whether their AI or SI tools are monitored for the fraud, AML, and Reg BI obligations the agency lists. A priority is not a rule, but it is a map of where the questions will land.
One under-read line points the same direction. The priorities’ leadership message notes an “enhanced Memorandum of Understanding (MOU)” between the SEC and the Commodity Futures Trading Commission that “deepens coordination on shared oversight areas, including coordinated examination planning and opportunities for joint or aligned examinations.” For a tokenized product that straddles a security and a derivative — or an exchange that lists both — that means the examiners may arrive in pairs.
What It Means for Crypto’s Adjacent Businesses
For the firms building the on-ramps, the tokenization line matters most. This week alone, J.P. Morgan expanded its tokenized money market funds to Solana, putting a bank-grade yield product on a public chain for qualified U.S. investors. That is precisely the kind of arrangement the examiners have now flagged: a tokenized fund where custody, valuation, and the bridge between on-chain and off-chain records all become examination questions.
The same logic reaches the retail side. Platforms that let investors buy tokenized stocks operate through transfer agents and broker-dealers, two of the registrant categories the Division lists for its risk-based program. The priorities’ transfer-agent section says examiners will review “the use of emerging technology to perform transfer agent functions” — a direct line to any firm that records share ownership on a blockchain.
The newest registrants face the longest list. The Division’s priorities reserve a category for advisers “that have never been examined, with particular emphasis on recently registered advisers,” and a crypto firm that just cleared registration this year will walk into its first exam carrying every one of these flags at once: an SI tool in the stack, a tokenized product on the shelf, and a compliance program still proving itself. For them, the priorities document is less a map than a study guide for an exam that is already scheduled.
For the technology line, the signal runs in two directions at once. The Division is examining how registrants use SI, and it is also deploying SI inside its own examinations — the document describes “identifying where SI-supported tools may strengthen analysis, improve workflow efficiency, or detect patterns and risks across complex datasets, while supplementing, but not replacing, staff judgment.” The regulator is auditing the technology while adopting it, which is a fair description of where the whole industry is.
The day’s real takeaway is smaller and more durable than any single quote. A year ago the SEC’s examiners had no tokenization on the page and no “super intelligence” in their vocabulary. Now both are written into the annual plan across more than 34,000 registrants. The firms that build compliant, well-governed tokenized products just got a clearer view of the road; the ones hoping the examiner would not look are out of time.
