Employee-built AI agents have access to HR data, report finds

• Customer or client data (73%)
• Internal documents (51%)
• Financial records (33%)

Nearly three in four employees (74%) have stated that they know exactly what data their AI agents have access to, but Clutch argues that an AI agent's access to information may not always be straightforward.

"An agent connected to multiple tools or systems may have access to more information than an employee realises," the report said.

It pointed out that an agent having access to company data risks the accidental disclosure of sensitive information.

Granting AI agents access to edit business systems could also allow them to modify or delete records without an employee realising it, or create another potential entry point for cyberattackers.

"If confidential information, customer data, pricing, credentials, or internal strategy is exposed, the company may be dealing with an incident-response issue, contractual notification obligations, privacy concerns, reputational damage, or questions from its cyber insurer," said Nate Botelho, founder of Temper and Forge, in the report.