The right client
AI builder
The client builds AI agents and sells them to enterprises, whose security reviews now ask how those agents are tested.Example: an AI customer support vendor whose enterprise prospects send security questionnaires with an AI risk section.
Enterprise builder
The client builds its own AI agents and is developing an AI safety, security, or governance program to oversee them.Example: a bank rolling out a customer-facing agent while its security team stands up an AI governance program.
The right agent
Blast radius
The agent is externally facing, so the company’s reputation and responsibility are on the line when it fails.Example: a customer-facing support agent answering thousands of end users a day.
Capability
The agent handles sensitive data or takes actions through connected tools, which puts the company’s compliance posture at stake.Example: an agent that updates CRM records or processes payments.
Obligation
The agent operates in a regulated area, where a failure can trigger regulatory action.Example: a recruitment agent classified as high-risk under the EU AI Act, or a finance agent in scope for a SOX audit.
Next: Introduce AIUC-1
The gap in existing frameworks, and why clients buy.