The European angle, and where the evidence stops
Europe's regulated buyers, such as banks, insurers and public bodies, are the customers most likely to decide whether the agent-governance pitch works. We have to be plain about what our source material covers. Our verified dossier contains no European company, no EU regulation and no European market data. Anything we said about the EU AI Act or European procurement rules would be invention, so we do not say it. The one European-adjacent detail is a vendor claim that Dentira's healthcare procurement customers sometimes operate across multiple countries.1 What the dossier does support is the global shift that European buyers will be choosing from: vendors are racing to prove their AI agents can be controlled.
Governance becomes the product
On October 15, 2026, ServiceNow announced AI Passport. It describes this as an authority layer and cryptographically signed credential that verifies the scopes of first- and third-party AI agents in real time, and it gives runtime control over what agents and MCP servers may do.2 The company also broadened its Super Intelligence Control Tower to cover discovery, visibility, control and cost-to-value measurement on a single data model.2 ServiceNow's Jon Sigler framed the problem this way: "As AI agents proliferate across the enterprise, visibility alone isn't enough. Enterprises need confidence that every AI agent is operating within its authorized scope."2
The same logic appears from a database vendor. In a sponsored piece published by VentureBeat, EDB argued: "The enterprise should not rely on a model choosing to follow policy. The policy has to be enforced by the system. That is the difference between hoping an actor stays in bounds and constructing bounds it cannot cross to begin with."3 That piece was presented by EDB, which sells the layer it recommends, so read it as an interested party's argument rather than neutral research. The two sources reach the same conclusion from different directions: enforcement has to sit in the system, not in the agent's good behaviour.
Both sources are company-originated. The newswire items in our dossier (ServiceNow's announcement and the Salesforce and Tiny releases below) come from a feed where, by our measurement, 56% of 5,087 checked claims held up.2 That is a reason to treat product claims as claims until a customer confirms them.
Salesforce buys its way into the customer-engagement layer
On October 20, 2026, Salesforce signed a definitive agreement to acquire Braze, a customer engagement platform, for approximately $5.66 billion in enterprise value, at $47.50 in cash per Braze Class A share.4
Salesforce's SEC filings let us size that against the buyer. Its fiscal 2025 revenue was $41.525 billion, up from $34.857 billion in fiscal 2024, so the price is roughly an eighth of one year's sales.5 Operating cash flow rose from $10.234 billion to $14.996 billion over the same period, so the price is also under two-fifths of a single year's cash generation.5 Cash on hand in the first quarter of fiscal 2027 was $8.935 billion, so the deal would absorb about two-thirds of that balance if paid from cash alone. The dossier does not say how the deal is financed, so treat that comparison as scale, not a funding forecast.5
The wider picture is of a company that is profitable and investing heavily. Net income was $7.457 billion in fiscal 2025, against $4.136 billion the year before.5 Research and development spending rose from $4.906 billion to $5.993 billion.5 Capital expenditure fell from $736 million to $594 million.5 That mix points to spending on software and acquisitions rather than on buildings or hardware. Gross profit rose from $26.316 billion to $32.255 billion, and operating income from $5.011 billion to $8.331 billion.5 We would note that cash balances moved around considerably across quarters, from $6.453 billion in the third quarter of fiscal 2024 to $10.928 billion in the first quarter of fiscal 2026.5 An acquisition of this size therefore changes a balance that already swings.
For retail investors the practical question is whether they already hold this. The dossier does not give index weightings, so we cannot say how much of any particular fund is Salesforce, and we will not guess. Anyone holding a broad index fund should check their provider's holdings list.
The small deals and the shareholder fights
Consolidation is not only a big-vendor story. On October 6, 2026, Tiny Ltd. completed its acquisition of the assets of Oso Cloud, a business specialising in authorization and access control, for approximately $1.9 million in cash.6 Oso brought about $5.3 million in annualized recurring revenue, lifting Tiny's from $70.0 million to about $75.4 million on a pro forma basis, an increase of roughly 7.6%.6 It served about 80 customers in security, fintech and developer software, all on recurring subscription contracts.6 Authorization is the same capability the larger vendors are now selling as agent governance, and here it changed hands for a small fraction of the Braze price.
Consolidation also brings disputes. On October 20, 2026, ZenaTech asked the BCSC and TSXV to intervene over Boardwalktech's failure to hold its 2026 annual meeting and what it called continuing governance deficiencies.7 It also issued an open letter to Boardwalktech shareholders criticising board independence and repeated small dilutive financings.7 These are one side's allegations. The dossier contains no response from Boardwalktech, so we cannot say which account is right.
The investor view: disruption, but not of the core
Sean Jacobsohn of Norwest, interviewed by Crunchbase News, offers a sceptical counterweight to the vendor optimism. On finance software he says: "You don't want AI doing calculations because it is not good at math. There are certain workflows it can handle where it doesn't produce precise numbers. But when you need precision, accuracy and calculations, you can't rely on AI for that."8 On incumbents he says: "I think it would be very hard to disrupt the core products of Workday, ADP, SAP, UKG and Dayforce. But it's easier to disrupt some of their secondary products, where the category isn't their core business."8 He adds that CFOs buy their own software with "one less layer of approval", which makes it "a little easier to replace it when they're the direct buyer."8
This matters for reading SAP's "Autonomous Enterprise" push, which our narrative notes without supporting detail. An investor who expects core ERP to be hard to dislodge, and AI to be unreliable for exact arithmetic, would expect agents to arrive first in the less precise workflows. Crunchbase News is a source where only 50% of 38 checked claims held up, so this is one investor's view and a thin evidence base.8
Where agents are already working
The clearest operating evidence in the dossier is small-scale. Dextr AI says its hotel agents now handle more than 1 million interactions a month across hundreds of hotels.9 That is the company's own figure from a funding story, and it comes from the same low-reliability source group.9 Dentira's chief executive, Vikas Gupta, says the company is "already the biggest player in a few verticals" and plans to become "the largest vertical software provider in procurement technology overall".1 Both are self-descriptions.
What to watch
- Whether regulated European customers, rather than vendors, start naming agent-governance tools in their own announcements. Today the dossier has none.
- Whether Braze shareholders approve the $47.50 per share cash offer, and how Salesforce pays for it.4
- Whether Boardwalktech answers ZenaTech's complaint to the regulators.7
- Whether ServiceNow's AI Passport is adopted by third-party agent vendors. The product's value depends on it.2
