When Your Software Starts Deciding for You
Salesforce turned agentic workflow execution on by default while the EU's transparency deadline closed to under three months — agents are now operators, not assistants.
7 September 2026 — Something changed quietly in a lot of European businesses this year, and most of them did not notice.
Salesforce's Winter '27 release auto-enabled Agentforce so that agents run whole workflows by default. Not as an option a company switches on after deliberation, but as the standard behaviour of the platform it was already paying for. A business that bought a CRM and got an agentic workflow engine has effectively acquired a new operator in the chain of decisions, without a procurement decision to match.
That matters because the EU AI Act's Article 50 transparency obligations bite on 2 December 2026 — 86 days from that week. GPAI watermarking becomes mandatory, and national surveillance regimes are ramping up to police it. The requirement is not that you avoid agents. It is that a person can tell they are dealing with a machine, and that synthetic content is marked as such.
The technical story reinforces the procedural one. Research published this week showed 80-90% of organisations under pressure to adopt real-time data for their agents, while roughly 40% hit a grounding bottleneck in production. In plain terms: the agents are being given access to live data faster than the plumbing can guarantee the data is correct. An agent answering confidently from stale or unverified data is worse than one that says it does not know.
NIST also launched its AI Agent Standards initiative, CrowdStrike shipped Falcon Guardian for runtime protection, and Anthropic committed to a $35 billion Nvidia-capacity deal — three signals pointing the same direction: the industry expects agents to proliferate, and is racing to build the controls after the fact.
What this means if you run an SME. Go into your main business platform and find out whether agents are active. Not whether you enabled them — whether they are running. If they are, establish two things this week: which workflows they touch, and who is accountable when one gets it wrong. The December deadline asks a question most businesses cannot yet answer, and the answer is not a document. It is a name.
Fourteenth in a weekly series on the developments that matter to small and mid-sized organisations.