SailPoint Report Finds AI Agent Governance Gaps
New SailPoint survey data shows most EMEA enterprises have deployed AI agents without purpose-built tools to govern them.
Updated on Nov. 4, 2026 in Artificial Intelligence
Live Poll
Do you trust companies to keep their AI tools under proper control?
SailPoint released findings from its Horizons of Identity Security Report at its annual Navigate conference, showing 89% of EMEA enterprises have deployed AI agents. The company also introduced new platform capabilities for governing those agents.
Why it matters
Organisations have built capable AI agents in production faster than governance has developed, and regulatory pressure from DORA and the EU AI Act is pushing firms toward greater resilience.
The Horizons of Identity Security Report is an industry survey, with 99% of EMEA enterprises lacking purpose-built identity security tools for AI agents and only 22% reporting mature shadow AI detection. The survey's sample size and methodology are not provided, and no prior-year comparison is available in the findings.
The players
SailPoint
SailPoint is an identity security company that publishes annual research on enterprise identity governance and sells software for managing access rights.
The details
SailPoint presented the findings at its annual Navigate conference and introduced several classes of AI agents that organisations can deploy to detect real-time threats and orchestrate other agent classes. The report found that 54% of EMEA organisations remain at the earliest, most manual stage of identity security.
Timeline
- November 4, 2026: SailPoint announced the Horizons report findings at its Navigate conference.
The Tech Race
The findings land as the EU AI Act and DORA impose binding obligations on European firms deploying AI systems, with SailPoint's data showing governance tooling has lagged agent deployment. The gap between deployment and oversight is where regulatory exposure accumulates for EMEA enterprises.
Organisations deploying AI agents face growing pressure to show they can identify and control non-human access to company systems. The survey suggests firms without mature shadow AI detection may be exposed to unmonitored agent activity.
The takeaway
Governance of AI agents is becoming an operational requirement rather than an afterthought, and organisations that lag on identity security tooling face both regulatory and productivity risk.
Further reading
Explore more coverage in Artificial Intelligence for context on how enterprises are governing autonomous software agents.
Source note: This article includes information reported by Manufacturing & Logistics IT Magazine.
Live Poll
Do you trust companies to keep their AI tools under proper control?
