"AI-Washing" Is Now an Enforcement Category: What the Presto Automation Case Means for Every Public Company

Greenwashing. Diversity-washing. Now AI-washing. The SEC has added a new category to its securities fraud enforcement vocabulary, and the first case on record involves a restaurant technology company called Presto Automation. The charges provide a practical template for understanding exactly what the Commission considers materially misleading when it comes to AI disclosures — and what every public company should review in its own filings as a result.

What Presto Did Wrong

Presto Automation marketed its flagship product, Presto Voice, as an AI-powered drive-through order automation system. The marketing emphasized AI-driven speech recognition that would reduce restaurant labor costs by automating order taking. The SEC identified two separate categories of misrepresentation.

First, until September 2022, the speech recognition technology powering all commercially deployed Presto Voice units was not developed by Presto. It was owned and operated by a third-party vendor. Presto failed to disclose this dependency in its SEC filings, presenting the AI capability as proprietary when it was not.

Second, once Presto did begin using its own technology, the company's disclosures claimed that Presto Voice "eliminated the need for human order taking." According to the SEC, this was materially false — the system actually required substantial human involvement to function. The gap between what Presto described and what the product did was not optimistic framing. It was, in the SEC's view, a material misrepresentation about the fundamental capabilities of the core product.

The Outcome and What It Signals

Presto agreed to a cease-and-desist order. The SEC imposed no civil money penalty, citing Presto's financial condition and remedial actions. The relatively light outcome should not be read as a signal that the conduct was marginal. The SEC was explicit that the statements were materially false and that Presto failed to maintain adequate disclosure controls. The absence of a penalty reflects circumstances specific to Presto, not a diminished view of the violation itself.

The Pattern That Creates AI-Washing Risk

The Presto case reflects a pattern the SEC views as systemic: companies under pressure to demonstrate AI capability making disclosure claims that outpace what their products can actually do. This pressure operates at every level — from marketing language to investor relations materials to the 10-K business description and risk factor sections that counsel review before filing.

The risk is particularly acute in three common situations: when AI functionality is powered wholly or in part by third-party providers that are not disclosed; when products are described as fully automated when human review or intervention is required; and when the commercial availability of AI features is described as broader or more mature than it actually is.

What Companies Should Review Now

Every public company that mentions AI in its SEC filings should conduct a gap analysis between its disclosure language and operational reality. This means reviewing the business description and risk factors for language that implies capabilities the product does not have; confirming that material third-party AI dependencies are identified and disclosed; and ensuring that operational limitations — including the extent to which human involvement is required — are accurately described.

The SEC has made clear that it does not need an AI-specific rule to bring enforcement actions for AI-related misrepresentations. Existing anti-fraud provisions and disclosure controls requirements are sufficient. Companies relying on the absence of specific AI disclosure rules as a reason not to examine their disclosures closely are misreading the enforcement environment.

The Presto case is the clearest signal yet that AI-related disclosures are subject to the same materiality and accuracy standards as any other SEC filing. The risk is not limited to companies that fabricate AI claims — it extends to any company whose disclosures imply capabilities, autonomy, or proprietary ownership that do not accurately reflect what the technology actually does. Generic language about being "AI-powered" or "leveraging artificial intelligence" is no longer a safe substitute for substantive disclosure. The SEC is reading those filings, and Finiti recommends treating AI disclosures with the same precision applied to financial statements.