AI is moving quickly from experimentation to enterprise-wide implementation. Across industries, organizations are embedding AI into core workflows, decision-making, and operations. According to our own Cyber Pulse AI Security Report, more than 80% of Fortune 500 companies already have active AI agents in production, built with low-code or no-code tools. The bigger signal for leaders is visibility: 29% of employees are using unsanctioned agents their security teams can’t see.

As AI systems become more capable—and increasingly autonomous—a consistent theme is emerging across enterprise conversations: trust is what can unlock scale, turning AI from isolated experiments into enterprise-wide execution.

Why now?

What we’re also seeing across our enterprise customers is a more pointed shift than “scale”: the organizations pulling ahead are the ones who treat trust as an accelerator of AI, not a tax on it. Many AI conversations could still default to one of two extremes—speed at the expense of control, or control at the expense of speed. Frontier Firms reject that tradeoff.

To fully support human ambition, AI needs to be built on two critical elements: intelligence and trust. Intelligence is what helps AI understand the organization—it’s your data, your workflows, people, and business context. Trust is what allows that intelligence to be used responsibly, securely, and with confidence. With both, AI becomes a platform for achieving business outcomes that actually do more for humanity.

That framing changes what “scaling AI” actually means. It’s no longer about deploying more models or buying more agents—it’s about building the operational discipline to let AI act on behalf of humans without losing visibility, control, or accountability. Across the customers we work with, this is increasingly a key differentiator in how organizations scale AI.

The five signals below are what we hear from leaders who are closing that gap and what separates AI strategies that scale from those that stall in pilot.

Signal 1: You can’t scale what you can’t see

Observability as a key foundation for controlling agentic AI systems

As organizations move from copilots and chat experiences to agentic systems that can take action, the question moves from “Can we build this?” to “Can we stay in control once it’s deployed?” That’s why observability is emerging as a prerequisite for scale: if leaders can’t see what AI systems are doing, they can’t manage risk, improve performance, or build confidence across the business.

If organizations are not providing the tools, employees will still go out and use AI tools themselves—not because of bad faith, but because they want to do more. That creates the risk of shadow AI. We addressed that early on by creating the guardrails.

Lev Malinin, Head of Enterprise Systems, Data and AI, The Salvation Army UK and Ireland

Insight: Most organizations treat observability as a tooling decision when it’s really an organization-wide responsibility. As mentioned earlier, according to Microsoft’s Cyber Pulse AI Security Report, 29% of employees have already turned to unsanctioned AI agents—meaning the visibility gap isn’t theoretical; it’s already inside the business. Closing it means IT teams operating the agent registry, developers building guardrails into runtime, and security teams detecting agent sprawl—together, not in sequence.

Executive takeaway: Frontier Firms answer four questions about every agent in their environment: what agents exist, who is using them, what systems and data they access, and what outcomes they drive. If your AI steering committee can’t answer all four today, observability is your starting point, and our guide details the four capabilities that make answering them possible.

Signal 2: Security and privacy are architectural as well as policy concerns

Security must be built into the system, not layered on

When AI systems interact with enterprise data at scale, policy alone may not be enough. That’s why Microsoft applies the three principles of our Secure Future Initiative to AI:

1. Secure by design: Security comes first when designing any product or service
2. Secure by default: Protections are enforced by default and aren’t optional
3. Secure in operations: Controls and monitoring continuously improve to meet evolving threats

Leaders we work with are increasingly applying the same posture to their AI estate: treating security and privacy as design requirements, not policies layered on after deployment.

Once we built out the knowledge base, we decided we didn’t want patient details. So we started masking the details before they go to AI—guardrails, curated content, heavily locked down.

Joseph Frost, Director of Data Science and AI, Sciensus

Insight: As AI becomes more agentic, the risk profile changes. Security and privacy controls should be integrated into identity, access, monitoring, and governance applying Zero Trust principles to AI agents just as organizations do for users and devices. This becomes especially important as systems gain the ability to reason and take action.

Executive takeaway: “Secure by design” is now a steering committee posture, not an implementation detail. Microsoft’s guide walks through how to apply Zero Trust principles to AI agents the same way you apply them to users and devices.

Signal 3: Governance is continuous—not a milestone

AI should have real-time oversight, not one-time approval

In many organizations, “governance” historically meant a review gate: approve a system, then monitor it lightly. AI changes that model. As AI systems continue to evolve and expand into new workflows, organizations are increasingly approaching governance as an ongoing capability, built for iteration, accountability, and continuous risk management.

We have an AI council—a multi-disciplinary stakeholder group of trustees and colleagues at all levels, across all departments, to think about governance and create the right guardrails to allow safe agent creation, but also to decide which agents are applicable to just a person, a team, a directorates or organization wide.

Kwesi Afful, Executive Director for Digital, Data, and Technology, Scope

Insight: Microsoft applies a three-stage model to governing AI risk:

1. Map: Running AI impact assessments and privacy and security reviews, including red teaming and stress testing, to inform decisions about safety, reliability, and fitness for purpose.
2. Measure: Developing the metrics to assess identified risks and testing planned mitigation methods to determine how effective they will be.
3. Manage: Donsistently monitoring performance, identifying opportunities for user agency, and educating stakeholders about responsible use, with human review and oversight built into the process.

Executive takeaway: Adopt governance as a loop, not a gate. The Map → Measure → Manage model gives your leadership a shared language for what continuous oversight actually looks like—and our guide details how each stage operates across the full AI lifecycle.

Signal 4: Responsible AI is becoming operational accountability

Trust depends on clarity, explainability, and defined ownership

Responsible AI is becoming an operational discipline: clear accountability, human oversight, and the ability to explain decisions—especially as AI systems take on more responsibility. Responsibility isn’t delivered by tooling alone; it requires alignment across engineering, business, legal, and security teams.

A common-sense approach is to treat AI as a shared responsibility. Where AI supports business process or decision-making, organizations should apply appropriate levels of validation, whether through human oversight, automated controls, or business rules depending on risk…When using for internal or customer-facing chatbots, the business function owner should define the governance model, including where outputs require review and where guardrails are enforced. AI interactions should generate appropriate telemetry to detect prompt abuse, attempted instruction bypass, policy violations, and other indicators of misuse.

Ben Thomas, Senior Microsoft Solution Architect, CDW UK & International

Insight: Many organizations scaling AI responsibly are increasingly defining ownership early: who is accountable for outcomes, who monitors drift, and who has authority to intervene when something changes. Microsoft’s approach is built on six principles—privacy and security, reliability and safety, accountability, inclusiveness, transparency, and fairness—each translated into practical questions leadership teams should be asking before a system goes live.

Executive takeaway: Start by defining trust. Establish Responsible AI principles that match your organization’s values and risk posture—then operationalize them through governance, oversight, and transparency. The guide includes the conversation-starter questions to align your steering committee on each of the six principles before you scale.

Signal 5: Digital sovereignty is shaping system architecture

Deployment decisions vary by the level of control each workload requires

As AI scales across regions, sovereignty is emerging as an important strategic risk and design consideration shaping where workloads run, how data is processed, and how organizations maintain control over data, access, and operations across jurisdictions.

It’s more than just residency; it’s also about making workload-level decisions based on risk, regulatory requirements, and operational realities without fragmenting tools and operations.

Sovereignty is on all of our minds—Advania operates across several different geographies as many of our customers do. The thing that plays on my mind most is the models that our data could find its way into and where data is being processed. That’s why we decided to go all in on Copilot for Microsoft 365 in the UK—within the guardrails of our tenant, I know where our data is, and we can maintain governance and compliance around the way we use AI as the interface to our daily work.

Nick Isherwood, Chief Operating Officer, Advania UK

Insight: Sovereignty influences architecture decisions early. When organizations treat it as an afterthought, they often face rework later—especially as AI expands into sensitive data, cross-border operations, and regulated contexts.

The five scenarios we hear most often from customers:

1. Policy and governance aligning data and operations with local compliance standards
2. Sovereign AI with clear storage and processing boundaries
3. Cloud operator access restrictions with provable controls against unauthorized access
4. Data residency and confidentiality to meet local laws and privacy expectations
5. Cloud resilience and business continuity to keep mission-critical services running during natural or geopolitical disruption

Executive takeaway: Address sovereignty requirements upfront. Align on five common sovereignty scenarios and core principles so your AI strategy can scale across jurisdictions without requiring re-architecture or compromising on security, compliance, or innovation trade-offs.

What leaders should do next

The five signals point to one possible conclusion: we expect the next phase of enterprise AI will be defined not by who deploys the most agents, but by who builds the operating discipline to scale them safely. Observability, security, governance, responsible AI, and sovereignty aren’t five separate workstreams—they’re the core of trust platform that lets intelligence become a durable business capability. This is the core of what we call Frontier Transformation at Microsoft: intelligence and trust platforms enable organizations to use any model in a model-diverse, open, and heterogeneous environment while compounding their own organizational intelligence.

The five signals above describe what leaders should pay attention to. Our guide, Grow Your Business with AI You Can Trust, gives your AI steering committee the checklist, shared language and frameworks to act on them—including practical depth on each signal alongside customer evidence showing what the trust foundation looks like in production.