Do you know every agent running in your organisation?

When employees build agents on low-code platforms — Power Platform, Copilot Studio, custom GPTs — the company is still the deployer under regulation like the EU AI Act. An HR screening agent built without a compliance assessment makes you non-compliant without anyone knowing the system exists.

Shadow agents are the new shadow IT, but with a sharper edge. Shadow IT meant unsanctioned tools and data silos. Shadow agents mean unsanctioned decision-makers — systems that reason, act, and create consequences at machine speed, outside governance oversight.

The barrier to building agents has never been lower. That’s the opportunity and the risk in the same breath. If anyone in your organisation can spin up an agent without it showing up in a registry, you don’t have visibility — you have a snapshot.

Go deeper: AI Agents and the EU AI Act maps how the Act applies to agents and why shadow agents create compliance exposure you may not see.