# Deploying AI agents in the enterprise: a security checklist

**Definition.** An enterprise AI agent is software that uses a language model to plan and take multi-step actions across real systems. Because it can act, not just answer, it must be deployed with the same rigor as any privileged automation.

## 1. Identity and permissions
- Give the agent its own identity, never a shared human account.
- Grant least-privilege access - only the systems and scopes it needs.
- Make every action attributable and auditable.

## 2. Data access and boundaries
- Define which data sources are in scope; block the rest.
- Keep sensitive data out of prompts and logs unless required.
- Respect existing access controls - the agent should never see more than the user it acts for.

## 3. Guardrails on actions
- Separate read from write actions; gate consequential ones.
- Require human approval for irreversible or high-impact steps.
- Set rate and spend limits.

## 4. Oversight and observability
- Log every plan, tool call, and result.
- Monitor for anomalies and provide a kill switch.
- Evaluate behavior continuously.

## 5. The human in the loop
Start with humans approving consequential actions, then widen autonomy as confidence and evidence grow.

Contact: contact@innoveye.com