The post DBS gave 1,500 employees AI agents. The interesting part is what had to exist first appeared first on Modular Technology Group.

Three different authorities, in two different countries, inside ten days. A bar association, a securities examiner and a national cyber agency. Not one of them asked whether anybody’s AI was any good. All three asked the harder question: can you show your work?

In this episode

• The default setting is the policy. The New York City Bar Association released Formal Opinion 2026-2 on August 17 (the opinion itself is dated August 5), extending two earlier opinions from clients to co-counsel, opposing counsel, witnesses, prospective clients and a firm’s own investigators. Get consent from every participant before an AI captures a conversation, and absent a good reason, the default should be to leave it switched off. The duty of competence now includes knowing how to turn the thing off. A New York City opinion rather than a national rule, but the reasoning travels. Formal Opinion 2026-2
• What examiners want is the minutes. Financial Advisor Magazine, working from an examination request document obtained by Citywire, reports what SEC examiners are asking investment advisers about AI: does the firm have an AI committee, does it keep written minutes, which channels promote the firm’s AI (the “AI washing” probe, with two 2024 cases settled for a combined $400,000), and were employees ever trained on the policy. No rule requires a document titled “AI policy”; advertising, compliance, privacy, recordkeeping and fiduciary rules already do the work. The ask is evidence, not a binder. Financial Advisor Magazine
• Agent governance, written down at last, and it is four controls. The UK’s National Cyber Security Centre published interim guidance on agentic AI on August 20. Every agent gets its own identity in a class distinct from humans, credentials scoped and short-lived, a named individual accountable for its activity, and its actions logged into monitoring the way a person’s are. Their maturity ladder ends, for the most sensitive work, at no external access with the model hosted locally. Interim guidance from a British agency, not American law. NCSC

The question we asked

Pick the newest AI tool inside your business. Can you name the person accountable for it, and show what it did last week? Get the Modular Briefing by email and reply to it. A person reads every reply.

A note on the voices

Laura and Arthur are AI-generated voices, produced locally on Modular’s own infrastructure. The reporting, editorial judgement and script are the work of the Modular team. Facts and figures are drawn from the linked sources; check them there before acting on anything.

Transcript

Your data, your rules.

The post The Modular Briefing, August 22, 2026: Show Your Work appeared first on Modular Technology Group.

Cale is back from Ai4 in Las Vegas, and the news wrote his trip report for him. Three stories this week, and one question underneath all of them: when an agent acts, who answers for it?

In this episode

• A federal court says the human who points the agent is the one who acted. On August 4 the Ninth Circuit vacated the injunction Amazon had won against Perplexity’s Comet shopping agent. Under the federal anti-hacking law, the court read “access” as a person entering a system; software is a tool, and tools do not carry liability. One circuit, an early stage, and Amazon’s other theories are still live. Opinion, No. 26-1444 (PDF)
• “A human reviews it” has a measured failure rate. Belgian developer Alex Wauters built a browser game that flashes real agent permission prompts on a sixty-second clock. Across more than forty thousand rounds, players approved roughly one dangerous request in three. Anthropic’s own telemetry puts real-world approval around ninety-three percent. The Register
• Half a continent could last one business day. A survey of 1,500 firms across the UK, France and Germany found 73.9% worried Washington could cut off their access to US technology, and 54.5% said they could operate for a single business day without their cloud services. 44% have a continuity plan they have tested. The survey was commissioned by Proton, which sells the sovereign alternative; weigh it accordingly. The Register

Report from the floor: Ai4 2026

Cale worked more than thirty booths at The Venetian, August 4 to 6. Three things he brought home.

• The argument won. A main-stage keynote titled “From Renting AI to Owning Intelligence.” Appliance vendors printing “No tokens. No surprises.” on their booth walls. The CIO of a NATO procurement agency describing keeping local models close for sensitive work. Owning your AI has stopped being a niche position.
• Most “agent governance” is a dashboard. It shows you what your agent did. Far fewer products will stop it, and watching an agent misbehave in real time is not a control. The crowd of new names read like the late nineties; Cale’s own bet, offered as a bet, is that many are gone within a year. If your oversight lives in a startup’s dashboard, your controls inherit that startup’s odds.
• Ng and Hinton. They disagree about where this goes, and Hinton’s doom ran a little thick for Cale. The take-home fits in two sentences: build now, the way Ng says. Govern like Hinton is right.

The question we asked

If one of your agents did something wrong yesterday, could you reconstruct what it touched, or would you be guessing? Get the Modular Briefing by email and reply to it. A person reads every reply.

A note on the voices

Laura and Arthur are AI-generated voices, produced locally on Modular’s own infrastructure. The reporting, editorial judgement and script are the work of the Modular team. Facts and figures are drawn from the linked sources; check them there before acting on anything.

Transcript

Your data, your rules.

The post The Modular Briefing, August 10, 2026: The Agent Was You appeared first on Modular Technology Group.

Agentic AI, agent governance, permissions, ~5 min read

Somebody at your company has already handed an AI agent a credential. Maybe it went through review. Maybe an operations manager wanted invoice reconciliation to stop eating her Fridays, found a tool that promised it, and pasted in a service account key. The agent works. It has been working for six weeks. Nobody wrote down what it is allowed to touch, who owns it, or how you would switch it off at four o’clock on a Friday.

A piece published on BleepingComputer on 29 July puts the mechanism plainly: agents guess. They try an action, read what comes back, adapt, and try again. The article is sponsored content from an identity security vendor, so take the product pitch with the usual salt. The diagnosis holds up anyway, and it is the part worth putting in front of your own team.

Guessing is the job description

A script does the same thing every time. You can read it, test it, and know what it will do in production because it has no capacity to do anything else. An agent works differently on purpose. You give it an objective, and it decides on the path. That flexibility is why anyone wants one. It is also why you cannot write an allow-list of the actions it will take, because neither you nor the vendor knows what they will be until it takes them.

Most of the safety work being sold right now sits downstream of that. Prompt filters, content policies, behavioral monitoring: all of them inspect what the agent is trying to do after it already holds the keys to do it. The BleepingComputer piece has a good line about the arithmetic there. One percent of infinity is still infinity. An agent making thousands of decisions a week against a filter that catches almost everything will still get through, and when it does, the only thing standing between a wrong guess and a bad outcome is what that agent’s credential can reach.

So the useful question is not whether the agent will be wrong. It will be wrong. The question is how far a wrong answer travels.

The math nobody put in the budget

Palo Alto Networks surveyed 2,930 security leaders for its 2026 Identity Security Landscape report and found 109 machine identities for every human identity in the enterprise, up from 82 to 1 the year before. The same research found that 96% of respondents say their human identities already operate with access well beyond what their roles require.

Two more numbers from that report are the ones I would put on a slide. Only 37% of organizations can revoke an AI agent’s credentials. Only 30% keep immutable audit logging of what those agents did.

Sit with that for a second. A third of companies can turn an agent off. Under a third can reconstruct what it touched. Everyone else has deployed something that acts on their data, at speed, with standing access, and has no mechanism to stop it or to explain it afterward. That is not a technology gap. It is a governance gap wearing a technology costume.

Small and mid-sized organizations tend to assume this is an enterprise problem because the identity counts are enterprise counts. The ratio is the point, not the total. A 45-person company running a handful of agents across email, finance, and a shared drive has the same structural exposure as a bank, minus the identity team that would notice.

Scope the mandate, not the model

The fix is old and boring, which is why it works. Treat an agent the way you would treat the person whose work it took over.

That person had a job description. They had a manager. They had access to the systems their job required and not the ones it did not. When they left, IT closed the account, and there was a record of what they had done while they were there. None of that was exotic. It was just applied consistently, because HR and IT had a shared process that made skipping it awkward.

Applied to agents, it comes down to four things you can start this week:

• Find them. Every organization has more agents running than leadership has approved. Ask each department head what is automated and who set it up, and write the answers down. This is a conversation, not a scan.
• Give each one a named human owner and a written mandate. What is this agent for, what data does it need, what is it explicitly not permitted to do. If nobody will put their name on it, that is your answer about whether it should be running.
• Scope the credential to the mandate, and make it revocable. Standing broad access is the multiplier that turns a wrong guess into an incident. An agent that reconciles invoices does not need write access to the CRM.
• Log what it did, somewhere it cannot edit. When an auditor, a client, or your own board asks why a decision came out the way it did, “the AI did it” is not an answer that survives contact with anyone.

Notice that none of this requires you to predict the agent’s behavior. It requires you to bound it. That is the shift the BleepingComputer piece is arguing for, and it is the same shift identity teams made twenty years ago when they stopped trying to trust users and started scoping them.

Your data, your rules, and that includes the AI working on it

Your AI, your rules. That means an agent operating inside your walls, on infrastructure you control, with permissions you set and can withdraw, and a record you own of everything it did. Not a promise from a vendor that their filters are good. A boundary you can point at.

At Modular Technology Group we build agent programs this way because the alternative gets expensive in a specific, predictable direction: the day something goes wrong and nobody can say what happened. Modular’s agent work runs under a written policy from day one, with a named owner per agent, scoped and revocable access, and an audit trail that lives on the client’s own infrastructure rather than a vendor’s.

Agents are worth having. Ours run our own operations daily. But an agent is a delegation of authority, and delegation without a mandate is just hoping. Start with the list of what is already running. Most teams find it is longer than they expected, and that discovery alone is worth the afternoon.

The post Your agents will guess. Permissions decide what that costs you. appeared first on Modular Technology Group.

Three stories this week, and one question underneath all of them: when the AI does something, whose name is on it?

In this episode

• Your team is already using AI outside their job. An OpenAI analysis of more than 800,000 work messages found 44% of occupation-specific messages involved tasks outside the sender’s own role. For HR professionals it was 69%, third highest of any group, and the crossover runs highest at small companies. HR Dive
• What real oversight looks like. The Society of Pension Professionals published a five-principle AI governance framework. Two travel to any industry: tier AI uses by risk instead of writing one blanket rule, and make sure the human reviewing an automated decision has the authority to overturn it. Finextra
• “AI did it” is not a defense. After a rogue agent went after another company’s systems, lawyers were asked who is liable. Nobody knows yet, because the law was built around human decision makers. Liability turns on who designed the system, who set its objectives, what safeguards existed, and how much independence was judged acceptable. The Register

From the week

Cale’s post on a bank hiring its first Chief AI Officer reached more than thirteen thousand people. Two later versions of the same argument reached about two hundred each. The difference was posting the day the news broke and opening with the specifics.

On the road

Modular is at Ai4 in Las Vegas, August 4 to 6, at The Venetian.

The question we asked

At your firm, right now, if somebody asked who approved the AI that touches your client files, is there a name? Or is there a document? Tell us. Get the Modular Briefing by email and reply to it, and it lands with a person who reads it.

A note on the voices

Laura and Arthur are AI-generated voices, produced locally on Modular’s own infrastructure. The reporting, editorial judgement and script are the work of the Modular team. Facts and figures are drawn from the linked sources; check them there before acting on anything.

Transcript

Your data, your rules.

The post The Modular Briefing, July 31, 2026: Is There a Name on It? appeared first on Modular Technology Group.

Episode 8 · 4:40 · Download MP3 · RSS · Transcript

An AI agent is not a feature you switch on. It is an actor with authority. This week: a single link that could build a working agent inside somebody’s workspace with every connector attached and approvals switched off, an attacker who ran an agent unattended inside a national finance ministry, and a government that stopped a billion-euro cloud procurement to ask where its data lives. Three sizes of the same question.

In this episode

• A link that built an agent. Researchers showed one crafted URL could create a working agent inside a logged-in account, attach every connected mailbox and file store, set approvals to never ask, and put it on an hourly schedule. Patched on June 8, with no reported exploitation in the wild. The open question is not the bug. It is how casually agent authority gets handed out.
• An agent nobody was supervising. A security firm reports an attacker running an off-the-shelf agent with its approval mode disabled for post-exploitation work inside a national finance ministry. One firm is the only public source and the ministry has not confirmed it. The transferable lesson is that the useful setting was the one that removed the human.
• A government asking where its data lives. Ireland’s Office of Government Procurement cancelled a cloud framework competition over digital sovereignty. Jurisdiction moved from a slide in a security review to a reason to stop a contract.

Sources

• The Hacker News, July 24, 2026 — agent-builder flaw
• The Hacker News, July 24, 2026 — unattended agent at a national finance ministry
• The Register, July 22, 2026 — Ireland stalls cloud tender over digital sovereignty

AI voice disclosure

Laura and Arthur are AI-generated voices, produced locally on Modular’s own hardware. Story selection, reporting, and fact-checking are done by the Modular Technology Group team. Your data, your rules applies to our own production too.

If your team is pointing AI agents at real systems and nobody can say who owns them or what they may touch, book a conversation.

Your data, your rules.

The post The Modular Briefing, Episode 8: Who Gave It the Keys? appeared first on Modular Technology Group.

Because the best digital employee is the one who actually understands your business.

Running a business today means wearing a dozen hats — customer service, marketing, administration, sales, and somehow finding time for the work that actually drives revenue. What if we told you there’s a way to delegate half those responsibilities to someone who works 24/7, never takes vacation, and costs less than a single full-time employee?

Welcome to AgentWorks: enterprise-grade AI agents designed specifically for businesses that value their data privacy and operational efficiency.

What Exactly Is AgentWorks?

Think of AgentWorks as your business’s most dedicated employee. Not a person, but an AI agent that lives and breathes your business operations. Unlike generic AI tools like ChatGPT that give you general answers, AgentWorks agents are trained specifically on your business — your products, your services, your customer history, your industry knowledge.

Here’s what makes it different: Everything happens on Modular’s secure, FedRAMP-certified infrastructure. Your data never leaves our environment, never gets mixed with other companies’ information, and never becomes training data for someone else’s AI.

The Problems AgentWorks Solves

The “After Hours” Challenge

Your customers don’t stop having questions at 5 PM. They email at midnight, call on weekends, and expect responses that demonstrate you understand their specific situation. AgentWorks agents can:

• Respond to customer emails instantly with personalized, accurate information
• Schedule appointments and consultations automatically
• Handle routine inquiries so your team focuses on complex issues
• Provide 24/7 customer support that actually knows your business

The Marketing Consistency Problem

Small businesses struggle to maintain consistent marketing. One week you’re posting daily, the next month goes by without a single social media update. AgentWorks changes that:

• Creates industry-specific content in your brand voice
• Researches competitors and market trends automatically
• Generates blog posts, social media content, and marketing materials
• Monitors industry news and creates timely, relevant content

The Administrative Time Sink

How much time does your team spend on tasks that don’t directly generate revenue? AgentWorks handles:

• Invoice processing and payment tracking
• Data entry and report generation
• Research and competitive analysis
• Calendar management and appointment scheduling
• Customer data organization and insights

Real-World Applications

Legal Practices

A criminal defense firm implemented AgentWorks to handle initial client consultations. The agent can:

• Draft initial case assessments based on client intake information
• Schedule consultations and manage court calendars
• Research case precedents and legal strategies
• Generate client status reports and billing summaries
• Handle routine legal questions, freeing attorneys for complex work

Result: 60% reduction in administrative overhead, faster client response times, and lawyers focusing on high-value legal work instead of scheduling and data entry.

Manufacturing Companies

A mid-size manufacturer uses AgentWorks for:

• Processing customer service inquiries about product specifications
• Managing inventory alerts and supply chain communications
• Creating technical documentation and safety reports
• Monitoring production schedules and flagging potential issues
• Generating sales reports and market analysis

Impact: 24/7 customer support, proactive issue identification, and data-driven decision making that improved operational efficiency by 40%.

Healthcare Practices

Medical practices leverage AgentWorks for:

• Patient appointment scheduling and reminder systems
• Insurance verification and prior authorization requests
• Medical records organization and reporting
• Patient education material creation
• Billing and claims management

Outcome: Reduced wait times, improved patient satisfaction, and staff focusing on patient care instead of paperwork.

The Technical Foundation You Can Trust

Security That Matters

AgentWorks runs on Modular’s FedRAMP-certified infrastructure — the same security standards used by federal agencies. Your data is:

• Encrypted at rest and in transit
• Isolated from other customers’ environments
• Never used to train other AI models
• Backed up with enterprise-grade disaster recovery
• Monitored 24/7 by our security operations center

No Vendor Lock-in

Unlike cloud-based AI services that trap your data, AgentWorks agents can be deployed on-premise or in your own private cloud environment. You always maintain control over your business intelligence.

Model Agnostic

We use the best AI models for each task — OpenAI for creative writing, Anthropic for analysis, specialized models for industry-specific tasks. As new models become available, your agents automatically benefit from improvements.

What Makes This Different from ChatGPT?

ChatGPT Limitations:
• Gives you general answers
• Forgets your conversation
• Uses your data for training
• Requires you to learn prompting

AgentWorks Advantages:
• Gives you business-specific intelligence
• Remembers every customer interaction
• Keeps your data completely private
• Pre-trained for your business processes

Investment and ROI

AgentWorks pricing starts at $1,500/month — less than the cost of a part-time employee, but with capabilities that would normally require hiring multiple specialists.

Consider the math:

Traditional Costs:
• Administrative employee: $3,500/month + benefits
• Marketing consultant: $2,500/month minimum
• Customer service rep: $2,800/month + benefits

AgentWorks:
$1,500-8,500/month (depending on complexity) for all three roles combined

Real ROI comes from:
• Reclaimed time for revenue-generating activities
• 24/7 availability improving customer satisfaction
• Consistent marketing driving new business
• Data insights enabling better business decisions
• Reduced errors in routine administrative tasks

Our White Glove, Boutique Approach

At Modular Technology Group, we don’t believe in one-size-fits-all solutions. Every AgentWorks deployment begins with deep understanding of your unique business challenges, industry requirements, and growth objectives.

Our boutique methodology:

Personal Discovery Sessions

We spend time in your business, understanding workflows that spreadsheets can’t capture

Custom Agent Architecture

Hand-crafted AI agents designed specifically for your industry and operational style

White Glove Implementation

Our team handles every technical detail, from secure deployment to team training

Ongoing Partnership

Regular optimization, feature updates, and strategic consultation as your business evolves

We’re not a massive corporation pushing generic products. We’re a specialized team that treats every AgentWorks deployment as a custom engineering project designed to amplify your specific competitive advantages.

Ready to Meet Your New Digital Employee?

AgentWorks represents the intersection of enterprise security, business intelligence, and practical AI application. But more importantly, it represents a partnership approach to business transformation.

Your data, your agents, your competitive advantage.

We’re selective about our AgentWorks partnerships because each implementation requires significant custom engineering and ongoing strategic collaboration. This isn’t a software purchase — it’s an investment in your business’s operational evolution.

Take the Next Step

Schedule your complimentary AgentWorks Strategy Session today.

In this 60-minute consultation, we’ll:

• Analyze your current operational challenges and identify high-impact automation opportunities
• Demonstrate AgentWorks capabilities with scenarios specific to your industry
• Design a custom implementation roadmap tailored to your business goals and timeline
• Provide transparent pricing based on your specific requirements

No sales pressure. No generic demos. Just strategic insight into how AI agents could transform your business operations.

Book Your Strategy Session

Call Direct: 888-723-4508

Contact Us: Get Your AgentWorks Strategy Session

The post Meet AgentWorks: Your Business’s Most Valuable Employee Never Calls in Sick appeared first on Modular Technology Group.