Updated: 5 Oct 2026
Originally Published: 1 Oct 2026

AI Agents Are Changing the Access-Control Question
AI agents can operate with the same permissions as the users they support, giving them access to data those users are already authorized to reach.
AI governance can define which tools are approved and how they should be used. But approval does not necessarily determine what data those tools are allowed to reach. An approved AI agent may still be able to interact with sensitive files, applications and workflows through existing user permissions.
That leads to a practical access-control question: who decides what an approved AI tool or agent is allowed to access?
Recent guidance from ENISA and Traficom, along real-world incidents,has made this question increasingly relevant for organizations managing sensitive data.
What You’ll Learn
In this webinar, you’ll learn:
- How Shadow AI, autonomous agents and excessive permissions can expose sensitive data
- Why approving an AI tool is not the same as controlling what it can access
- What recent incidents tell us about autonomy, credentials and access
- Where existing controls fit – and the question none of them were designed to answer
- A practical framework for setting boundaries around sensitive files and applications
Watch the Webinar: AI Agents & Sensitive Data – Rethinking Access Control
If your organization is reviewing how AI tools and agents access sensitive data, our team can help you assess where application-level access controls may be useful.
Who Should Watch
This webinar is designed for professionals responsible for AI governance, data protection and access control, including:
- Data Protection Officers
- Compliance Managers
- CISOs and security leaders
- IT Managers
- AI governance and risk professionals
It will be particularly relevant to organizations handling personal, financial, health or other sensitive business data.
Speaker

Alexey Boltunov
Chief Operating Officer (COO), International
Alexey has been with Jetico since 2013, starting in technical support before moving through a series of technical and leadership roles. His background spans software quality assurance, usability, customer success and product strategy, giving him a practical view of how security controls need to work in real environments – not just on paper.
Today, Alexey works closely with Jetico’s engineering and commercial teams on data protection, access control and emerging security challenges. His current focus includes how increasingly autonomous and over-permissioned AI tools can interact with sensitive data, and how organizations can put practical boundaries around what applications and processes are allowed to access.
Supporting AI Access Control with BestCrypt Data Shelter
BestCrypt Data Shelter provides application-level access control for protected data, allowing organizations to define which applications, processes and AI agents are permitted to access sensitive files.
With BestCrypt Data Shelter, organizations can:
- Apply a default-deny model to sensitive files and folders
- Allow access only through approved applications and processes
- Restrict unauthorized or over-permissioned AI tools and agents
- Centrally manage policies and maintain visibility into access activity
BestCrypt Data Shelter is designed to work alongside existing identity, endpoint and governance controls rather than replace them.
Explore BestCrypt Data Shelter
Related Resources
For a deeper exploration of the topics discussed in the webinar:
- The EU AI Act Today: What Changed on August 2
Understand what changed under the EU AI Act, what was postponed and why organizations still need practical controls around AI use and data access.
- Agentic AI Security Risks: ENISA’s Warning & the Hugging Face Incident
Explore how ENISA’s guidance on frontier AI connects with the Hugging Face incident and the need for stronger access controls around autonomous agents.
- Shadow AI Agents: Why Access Control Is the Missing Layer
Learn why Shadow AI is no longer only an upload problem and how inherited permissions can give AI agents broader access than intended.
- BestCrypt Data Shelter
See how application-level access control can help restrict which applications, processes and AI agents are allowed to access sensitive files.