{"id":171219,"date":"2026-09-09T08:01:00","date_gmt":"2026-09-09T07:01:00","guid":{"rendered":"https:\/\/www.intelligentcio.com\/eu\/?p=171219"},"modified":"2026-09-07T09:51:46","modified_gmt":"2026-09-07T08:51:46","slug":"veeam-research-reveals-emea-shadow-agent-crisis-as-ai-governance-risks-grow","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/eu\/2026\/09\/09\/veeam-research-reveals-emea-shadow-agent-crisis-as-ai-governance-risks-grow\/","title":{"rendered":"Veeam research reveals EMEA \u2018shadow agent\u2019 crisis as AI governance risks grow"},"content":{"rendered":"\n<p><em>Seventy per cent of organizations admit that AI workflows are interacting with sensitive corporate data without full oversight. As regulatory pressure mounts and corporate accountability increases for C-level executives, a lack of data governance and trust is triggering boardroom conflict and executive anxiety over personal liability exposure.<\/em><\/p>\n\n\n\n<p>New research from Veeam Software show a growing \u2018shadow agent\u2019 crisis across EMEA enterprises. According to the findings, organizations are battling unmanaged AI on two fronts. On the data security front, 70% of organizations admit that automated AI workflows are interacting with sensitive corporate data without full oversight.<\/p>\n\n\n\n<p>Meanwhile, on the governance side, IT is losing control, with 67% reporting that employees are creating autonomous AI workflows that IT cannot fully track.<\/p>\n\n\n\n<p>As organizations race to operationalize AI, the findings highlight a critical challenge: ensuring the data powering AI agents remains trusted, secure and resilient. Without the right governance, visibility and protection, businesses risk exposing sensitive information, increasing compliance risks and undermining the trusted data foundation required to scale AI safely and confidently.<\/p>\n\n\n\n<p>Rising regulatory pressure and \u2018corporate accountability\u2019 are also pushing AI governance out of the technical back office and into the boardroom. Nearly one-third of organizations (32%) say this pressure is already creating tension or conflict among executives.<\/p>\n\n\n\n<p><strong>AI Governance is now a C-suite liability<\/strong><\/p>\n\n\n\n<p>As compliance obligations across EMEA become more complex with the introduction of personal legal responsibility on C-level executives for cyber resilience and regulatory compliance, senior leaders are feeling the heat. The research found that 58% of the enterprises surveyed now find themselves under new corporate accountability laws. Worryingly however, one in ten respondents (12%) stated that exact individual responsibilities are shared and unclear.<\/p>\n\n\n\n<p>This increased responsibility is having a clear impact on executive teams:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>40% are <strong>concerned about personal liability<\/strong> or consequences.<\/li>\n\n\n\n<li>39% report increased <strong>board-level scrutiny.<\/strong><\/li>\n\n\n\n<li>37% say it has increased <strong>personal stress or anxiety.<\/strong><\/li>\n\n\n\n<li>32% say it has created <strong>tension or conflict with other executives.<\/strong><\/li>\n<\/ul>\n\n\n\n<p>However, the research also points to a positive shift: 45% say increased accountability has improved alignment and focus at the leadership level.<\/p>\n\n\n\n<p>\u201cExecutives have never had more to think about around data governance and cyber resilience regulations,\u201d said Tim Pfaelzer, General Manager and Senior Vice President for EMEA, Veeam. \u201cWhile the increased stress and tension are completely understandable, if the result is better alignment at the board level, the organization will be far better positioned to trust its data and AI governance in the agentic era. With greater alignment ultimately comes better data governance, visibility and protection across the organization.\u201d<\/p>\n\n\n\n<p><strong>\u2018Shadow agents\u2019 are spreading across EMEA faster than governance can keep up<\/strong><\/p>\n\n\n\n<p>The findings reveal a fragmented approach to AI governance across EMEA. Germany faces particularly acute challenges, with 81% of leaders admitting that automated workflows are interacting with sensitive data without oversight, while 79% report employees creating \u2018shadow workflows\u2019 that IT teams cannot track.<\/p>\n\n\n\n<p>The UK is facing similar challenges, with 75% of organisations saying they lack adequate oversight of AI agents interacting with sensitive data.<\/p>\n\n\n\n<p>This is happening despite significant investment in more controlled AI environments. Across EMEA, 41% of organizations are building their own local or sovereign AI models specifically to combat Shadow AI.<\/p>\n\n\n\n<p>Nearly half (49%) are adopting a hybrid approach to do this, using a blend of local and sovereign models for sensitive data and global models for general tasks.<\/p>\n\n\n\n<p>MEA organizations are the outlier here, with 41% relying entirely on global AI providers for all use cases \u2013 suggesting the EU regulatory landscape is having a major impact on AI governance within EMEA enterprises.<\/p>\n\n\n\n<p>\u201cEMEA organizations are still getting to grips with governance in the new agentic era,\u201d said Pfaelzer.<\/p>\n\n\n\n<p>\u201cBut the data shows the industry is having the wrong conversation about AI trust. Trying to control thousands of autonomous agents one-by-one simply doesn\u2019t scale. To make AI safe at the enterprise level, organizations need to secure, govern and understand the data those agents depend on.\u201d<\/p>\n\n\n\n<p><strong>EU AI Act confidence gap exposes governance risk<\/strong><\/p>\n\n\n\n<p>Adding to this pressure is the EU AI Act. The Act is already beginning to take effect, with further compliance deadlines rolling out through to 2028.<\/p>\n\n\n\n<p>The research revealed that while the overwhelming majority (83%) of leaders feel the Act will have a positive impact on organizations and the wider landscape, 62% feel \u2018ambiguities or grey areas\u2019 may create compliance risk, while a further 63% fear it may introduce unintended operational or legal risks. The UK and Germany are particularly concerned here, with 74.4% and 73.6%, respectively, viewing the ambiguities as a compliance risk.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Seventy per cent of organizations admit that AI workflows are interacting with sensitive corporate data without full oversight. As regulatory pressure mounts and corporate accountability increases for C-level executives, a lack of data governance and trust is triggering boardroom conflict and executive anxiety over personal liability exposure. New research from Veeam Software show a growing [&hellip;]<\/p>\n","protected":false},"author":58,"featured_media":171220,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[21064,93],"tags":[21655,22565,6380,564,444,7,20475,21622,26661,25227,22789,5589],"class_list":["post-171219","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-top-stories","tag-ai-agents","tag-ai-governance","tag-cyber-resilience","tag-cybersecurity","tag-data-governance","tag-emea","tag-enterprise-ai","tag-eu-ai-act","tag-shadow-agents","tag-shadow-ai","tag-sovereign-ai","tag-veeam"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/171219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/58"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=171219"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/171219\/revisions"}],"predecessor-version":[{"id":171221,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/171219\/revisions\/171221"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/171220"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=171219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=171219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=171219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}