CharliAI, Protegrity Partner to Push AI agents Into Production

CharliAI and Protegrity announced a partnership on October 20 designed to let regulated enterprises run AI agents on their most sensitive data, according to the partnership announcement carried on GlobeNewswire. The deal pairs two halves of the agent-control problem: Protegrity protects the data that AI agents use and the knowledge they could piece together from it, while CharliAI governs what each agent is allowed to do and keeps a forensic record of what it did. For an industry where AI agents are moving out of pilots and into production workflows that touch critical data, change records, and trigger actions in other systems, the announcement frames the bottleneck not as model capability but as clearance: security and audit teams must answer for every step an agent takes, and most are not ready to sign off.

The AI friction tax keeping AI agents in review

The announcement leans on fresh research to make its case. According to Enterprise Management Associates' 2026 State of AI Friction research, 83 percent of IT and security leaders say security or compliance reviews have delayed AI from reaching production. At the same time, 69 percent already run AI agents that write to databases and trigger external APIs, yet still rely on controls built for humans querying data rather than agents acting on it. The mismatch is the market opening: enterprises are running autonomous systems on yesterday's governance.

Christopher Steffen, vice president of research at EMA, framed the dilemma in the announcement as an "AI friction tax" that organizations pay on both sides, arguing that the way out is not a faster review but protection built into the workflow so AI agents can be cleared to do the work they were built for. Kevin Collins, chief executive of CharliAI, made the same point more bluntly in the announcement, telling reporters that the market is waking up from the hype cycle and realizing capability is not clearance: an agent that can execute a complex workflow does not automatically have the authority to do so unsupervised. CharliAI's answer, according to Collins, is runtime control and forensic proof that let enterprises move autonomous AI agents into production without handing over the keys to their data and systems.

The diagnosis matters because the agent-control question is really two questions. As the announcement puts it: what is an agent allowed to see, and what is it allowed to do? AI agents reason, hand work to other agents, and act at machine speed, so a one-time access check cannot answer either question, and a dashboard that reports exposure after the fact cannot answer them while agents are running. The two companies' thesis is that data protection and runtime control have to work together, inside the agent's workflow, rather than sitting at the perimeter.

What each side brings to the AI agents' workflow

The integration embeds protection into the agent's workflow at two distinct layers. Protegrity operates at the data layer, protecting sensitive data before any model, agent, or tool receives it. According to the announcement, AI agents work with semantically protected values that keep their meaning but not their risk, and policy decides what data to release based on who is asking and why. The result is that an agent can reason over a customer record without ever being able to see or leak the raw sensitive fields.

CharliAI operates at the action layer. Its Ancaeus platform checks each AI agent's identity and authority before it acts and stops execution when behavior goes out of bounds. Decisions made and actions performed are recorded as the work happens, giving security and audit teams evidence of what the agent was shown and what it did. For regulated workflows in banking and insurance, that forensic trail is what makes an agent's activity reviewable rather than merely logged.

Michael Howard, chief executive of Protegrity, offered one of the sharper framings of the threat model in the announcement, arguing that the agent that should worry security teams is not just the one that goes rogue but the one that does exactly what it is allowed to do and works out things nobody meant it to know. In his words, every agent is a new insider that never signed an NDA. Pairing data protection with control over what AI agents do, according to Howard, turns that insider risk into an opportunity he called knowledge arbitrage: extracting the most value from data with the least exposure.

Commercially, the partnership is aimed squarely at regulated verticals. The announcement says banks, capital markets firms, and insurers will be able to buy the combined integration from CharliAI, which resells Protegrity's data and AI security solutions alongside CharliAI's Ancaeus platform. Vancouver-based CharliAI positions itself as the forensic control layer for enterprise AI, while Fairfield, Connecticut-based Protegrity describes its approach as enforcing one policy across data, agents, and inference.

Agent governance is becoming the trust layer

The CharliAI-Protegrity deal is not arriving in isolation. The same day, the same week, the agent-governance category is showing visible momentum: Dataminr announced it had achieved AIUC-1 certification, a standard for AI agent security, safety, and reliability built with more than 300 Fortune 500 security leaders, making it one of the first organizations worldwide to earn independent validation of how its AI agents perform under adversarial conditions. Meanwhile, companies like Point Predictive are putting agents to work on forensic fraud review across millions of auto-loan applications, another case of AI agents touching high-stakes data where auditability is the price of admission.

Together, these moves point to a maturing understanding of what it takes to deploy AI agents at enterprise scale. The first wave of agent infrastructure was about capability: tools, orchestration, and memory that let agents act. The current wave is about permission: identity, policy, data protection, and audit trails that let agents act safely inside organizations that cannot afford mistakes. Partnerships like this one, standards like AIUC-1, and product launches built around forensic review all answer the same buyer question: not what can these AI agents do, but what will they be allowed to do, and who can prove it?

For the broader agent ecosystem, the significance is that governance is becoming a product category in its own right rather than a feature bolted onto agent platforms. As AI agents gain access to email, documents, calendars, and core business systems, the split between "see" and "do" that CharliAI and Protegrity are building around looks less like a vendor partnership and more like the emerging architecture for trusted agents in production. The announcements and the syndicated coverage of the deal suggest the message is landing: enterprises are not short on AI ambition; they are short on a way through the risk review.