Agentic family office

An agentic family office is a family office whose operations are staffed by AI agents instead of employees — owned by the family it serves, with every consequential action approved by a human member, and with the technology provider holding no custody of assets and giving no investment advice.

Each clause carries weight.

Staffed by AI agents. The daily work of a family office is administration on a calendar: reconciling accounts across entities, processing invoices, triaging capital-call notices, chasing K-1s, tracking premiums, renewals and filing deadlines, assembling the consolidated report. In an agentic family office, software agents do that preparation work — the work a bookkeeper, a senior accountant and a controller do in a staffed office.

Owned by the family it serves. The office — its entity, its ledgers, its documents, its history, its continuity run-book — belongs to the family. The technology provider is a vendor to the office, never its owner or operator. Fire the vendor and the office remains.

Every consequential action approved. Agents prepare; they do not decide. Every payment, filing and document issuance stops in an approval queue until a human member authorizes it, and every step is written to a permanent audit trail.

Non-custodial, non-advisory. The provider never holds or moves the family’s money and never advises on securities — no products, no recommendations, no percentage of assets. The licensed professionals the family hires — CPA, attorney, any investment adviser — keep their roles; the agents track them, schedule them, and close the loops between them.

The vocabulary arrived in steps. “Family office” enters the lore with John D. Rockefeller’s office of 1882 and was codified as a category in the 1990s–2000s. “Single-family office” and “multi-family office” followed as the forms multiplied. “Virtual family office” appeared around 2014 and split into two incompatible meanings — a CPA-channel coordination model and, more recently, a wealthtech lean-office model — that still circulate unreconciled. “Digital family office” never solidified at all.

In 2025–26 the vendor market converged on adjectives: “agentic AI for family offices” (Masttro), an “AI-native family office suite” (Asseta), the “agentic era” (Forbes, 2025). What none of that names is the office itself — a form with an owner, a staffing model, a governance structure and a regulatory posture.

As of July 2026, no site, report or person has published a canonical definition of the compound noun “agentic family office” (verbatim-search verified, July 2026). This page supplies one. To be transparent: we are defining, not claiming precedent. Date the claim, check it, and hold whoever uses the term next to the same standard.

A useful side effect: the definition resolves the virtual family office’s ambiguity. Agents perform the staff-work the wealthtech VFO sells software for, under the governance disciplines of a real single-family office, with the cross-adviser coordination the CPA-channel VFO promised but could not systematize.

Why do family offices exist at all? Ronald Coase’s answer to why any firm exists applies exactly: you internalize work when coordinating outside providers costs more than employing your own staff. A family past a certain complexity can buy every function from the market — CPA, attorney, bookkeeper, broker — but providers do not coordinate themselves, and the family pays the coordination cost in the principal’s own attention. The single-family office is that make-or-buy decision resolved as “make”: a firm incorporated around one family.

The classic threshold — roughly $100M of net worth — was never prestige. It was arithmetic: a dedicated staff would not cost much less than $1M a year. Offices with $250M or less in assets average $0.9M in annual operating cost, rising to $6.6M above $1B, and 40% of offices run under $1M (J.P. Morgan Global Family Office Report, 2026). Staff compensation consumes 39% of total budget at large offices and up to 72% at small ones (Campden Wealth/AlTi, 2025). Below the threshold, the math said: stay fragmented, and the principal does the integrating.

AI agents change the arithmetic. When the marginal cost of knowing the state of the system, chasing its obligations and coordinating its providers falls by orders of magnitude, the wealth level at which “your own office” beats “you as unpaid coordinator” falls with it. That is the first-principles reason this category exists now — not that AI is impressive, but that the coordination-cost curve collapsed. And incumbents cannot follow the curve down: asset-based fees and staff-sold platforms are priced on the old one.

The honest qualifier was never net worth anyway. It is entity-and-obligation complexity — the count of entities, K-1s, capital calls, properties, filings and states — because that, not the balance, is what consumes the calendar.

Every trust mechanism the wealth industry has evolved — fiduciary duty, fee-only models, audits, custody separation — is a mitigation of one underlying problem: the people a family hires have interests that diverge from the family’s. The agentic family office’s defining properties are not features. Each deletes the precondition of a documented failure mode.

Ownership deletes hold-up. Because the family owns the family office, the vendor can be fired without the family losing its own infrastructure — records, ledgers, run-book and all. This is also the configuration the regulator itself blessed: the SEC Family Office Rule (17 CFR 275.202(a)(11)(G)-1, adopted 2011) excludes from investment-adviser status a family office wholly owned and controlled by family clients, serving only family clients.

Approval on everything deletes discretion. In eight documented family-office embezzlements from 2010–2025, not one was caught by an internal control, and in every case the thief held both money movement and the records that would have revealed it (DOJ and court records). One bookkeeper wrote herself at least 175 checks totaling more than $29M over roughly a decade; the only reconciliation artifact in the chain was authored by her (DOJ, 2022). An approval queue in which the preparer can never be the approver, with a reconciliation record authored by the system, is segregation of duties without headcount — the master control that one-to-three-person offices structurally cannot staff.

Approvals must verify to a channel the principal controls. The most precise failure on record: Shohei Ohtani’s interpreter changed the registered email and phone number on the account, answered roughly 24 bank callback verifications himself, and moved about $17M (DOJ, 2025). The bank’s control ran every time; it verified to a contact the insider had edited. An approval that verifies to an editable contact-of-record verifies nothing.

No custody deletes the theft channel; a flat fee deletes the incentive. A provider that never holds or moves funds cannot take them. A fee decoupled from the balance sheet cannot shape advice: 1% of $30M is $300,000 a year whether that year’s work was heavy or light. The incumbents' own filings show the alternative. Rockefeller Global Family Office discloses annual retainers of $75,000–$500,000 for family-office services and states, verbatim, that "the Firm does not act in an investment advisory capacity and has no fiduciary duty when providing Family Office Services,“ with a portion of the counseling fee ”shared with the client’s Rockefeller representative" (Rockefeller ADV Part 2A, 2026).

Where mitigations manage a conflict, this configuration removes its preconditions. That is a structural claim — checkable in the architecture, not taken on trust.

The office runs as a loop with four stations. The member keeps two of them, permanently.

Know where things stand. Agents ingest documents as they arrive — statements, invoices, capital-call and distribution notices, K-1s — reconcile every account across every entity, and maintain one consolidated picture in which every number traces to its source document. This is the office’s hardest data problem, and today it is mostly done by hand: about one-third of family offices perform over half of their reporting manually (Campden Wealth/AlTi, 2025).

Set where they should be. The member sets direction — budgets, policies, calendars, thresholds. The agents hold that direction as the standing instruction set: the tax spine (March 15, September 15, October 15 for entity-heavy families), premium and renewal ticklers, and the roughly 10-day fuses on capital-call notices, where default penalties under fund agreements can run to 10–15% penalty interest or forfeiture of the entire interest (Cooley).

Approve staged actions. The operator agent prepares each action — a payment, a filing package for the CPA, a notice — and stages it in the approval queue with its source documents attached. Nothing consequential executes without a member’s authorization, verified on a device and channel the member controls.

See results reconciled. Every executed action is written to a permanent, tamper-evident audit trail. The close reconciles what happened against what was authorized. The consolidated pack and the continuity run-book stay current as living artifacts, not annual projects.

Then the loop turns again. The two moments that are never delegated — by design, not by roadmap — are setting the direction and authorizing the actions.

The definition is as much about exclusions as inclusions. Five, stated plainly:

• Not an investment adviser. No advice on what to invest in, no asset allocation, no rebalancing, no manager selection, no promises about returns — ever. The Investment Advisers Act draws that line, and in this model the line is structural rather than cosmetic: the provider is a vendor to the family’s own excluded office, not an adviser to the family.
• Not a custodian. The provider never holds, pools or moves funds on its own authority. Money sits in the family’s own accounts at the family’s own institutions and moves only on member approval.
• Not a robo-advisor. There is no portfolio product and no managed account. The subject matter is operations — bookkeeping, bill pay, entity administration, consolidated reporting, document management, coordinating the advisers the member hires.
• Not a chatbot. A conversation interface is not an office. The deliverable is completed operations under approval — reconciled ledgers, met deadlines, filed documents, a current run-book — with a system of record underneath.
• Not full autonomy. The member keeps setting direction and authorizing every consequential action, permanently. That is the design, not a limitation awaiting a bolder roadmap.

And the licensed professionals stay. The CPA signs the returns. The attorney drafts the documents. Any investment adviser is one the family hires. The office coordinates them, tracks them, and closes the loops between them — it does not replace them.

Every family-office form is a coordinate on three axes: who owns the family office, who staffs it, and what is in scope (PwC; Deloitte). Compared honestly:

On the three-axis map, the agentic family office occupies a coordinate that was empty until now: family-owned, agent-staffed, operations-only. Each neighboring form concedes one axis — the commercial MFO and FOaaS concede ownership, the coordination VFO concedes operations, the software VFO concedes staffing, the traditional SFO concedes cost and key-person concentration.

The honest state of adoption first. Only about 22% of family offices use AI operationally (Citi), and where it is used, the work is mostly research and reporting, not execution — usage tripled year-over-year, but from a low base (RBC/Campden North America Family Office Report, 2025). The hesitation is rational, and buyers say it plainly: "I certainly wouldn’t trust anything labelled 'AI' with any of my money. And I’m a software developer" (r/fatFIRE). Family offices are also targets: 43% suffered a cyberattack in the preceding 12–24 months, and 93% of attacks began with phishing (Deloitte, 2024). Any honest version of this category answers those facts with mechanics, not branding.

And the model has real failure modes — including ours:

• An unreviewed queue is a rubber stamp. The security model assumes an approver who actually reads what they approve. Reflexive approval degrades the control to theater.
• The data unification is the hard part. The practitioner consensus is blunt: “the bottleneck is not the AI itself, but the fragmented, unstructured data underneath it” (Family Office Fintech Forum, via Hubbis, 2026). Building the office’s initial consolidated picture is real work; a vendor who waves it away is telling you something.
• It is not a substitute for licensed judgment. Tax positions, legal structures and investment decisions belong to the professionals the family hires.
• Below meaningful complexity, it is the wrong tool. A family with one entity and a brokerage account does not need an office of any kind.
• What stays human, permanently: direction, judgment, relationships, family governance — and the approvals themselves.

A skeptic evaluating any vendor in this category — including us — should ask:

1. Who owns the family office and its records, and exactly what do I keep if I fire you tomorrow?
2. Can any path in your system move money without a human approval? Show me the mechanism, not the policy.
3. What channel does an approval verify to, and can any staff member — yours or mine — change it? The $17M wire fraud was a changed phone number.
4. Who authors the reconciliation record — a person who also moves money, or the system?
5. Is the audit trail immutable, and can I export all of it?
6. Are you, or any affiliate, a registered investment adviser — and what is your fee attached to?
7. Does every number in my reports trace to a source document I can open?
8. If I die tomorrow, what does my spouse actually receive — and can they run it?

We build Avolve to this definition, and the definition is falsifiable against the product.

The member’s family office is the member’s — entity, ledgers, documents, history and continuity run-book. Agents run the calendar: reconciliation, document intake, capital-call triage, the tax spine, renewal ticklers, the consolidated pack. Every consequential action is staged in an approval queue that verifies to the member’s own device, and every step is written to a permanent audit trail. We never hold or move the family’s money. We never advise on securities; the member’s CPA, attorney and any adviser the member hires keep their roles, coordinated rather than replaced. The fee is flat — never a percentage of assets.

A new office begins with a 90-day build that delivers five named artifacts — entity map, consolidated ledger, K-1 and capital-call pipeline, provider directory, continuity run-book — after which the office runs daily under the member’s approval queue.

What we are not: not a registered investment adviser, no custody, no products, no asset-based fees.

Everything on this page is checkable in the architecture. If a claim here cannot be shown in the product, hold us to it.