European organizations are ready to put AI to work. Before an AI agent reaches production, however, security, privacy, and procurement teams need clear answers.
Which systems can the agent access? Who approved that access? What actions can the agent take? If the agent makes a change, can the organization show what happened and why?
These questions are especially important for European companies. Data-residency requirements, privacy reviews, works councils, and established procurement processes often shape a technology decision from the start. AI can move quickly, but the governance around AI needs to be clear before deployment.
That starts with identity.
Every agent needs an identity# #
The identity problem did not begin with AI.
Most companies already manage a large and growing number of non-human identities. Service accounts continue running after the projects that created them end. Workloads connect to production systems. API keys sit in configuration files. Automations perform important tasks without a clear owner or regular review.
AI agents add a new kind of non-human identity. An agent can use tools, retrieve information, and take action across business systems. That makes access decisions more consequential. An agent should have only the access required for its job—and an organization should be able to explain, review, and remove that access.
C1 governs identity across the environment: employees, contractors, service accounts, workloads, and AI agents. C1 helps organizations control what each identity can access, what actions that identity can take, and whether the access was authorized.
With those controls in place, teams can give AI agents useful access without giving them unchecked access. They can review an agent's permissions, maintain an audit trail, and remove access when the work is complete or the risk changes.
C1 can now be provisioned in the EU# #
As of this month, new customers who need their C1 tenant data held in the EU can be provisioned on C1's EU instance. The instance runs in AWS Frankfurt, with Ireland serving as the disaster-recovery region.
For organizations whose privacy or security requirements have made US hosting a barrier, EU data residency makes C1 available for consideration. European teams can now evaluate C1 while meeting their data residency requirements.
**See the C1 platform** → [c1.ai/platform-overview](https://www.c1.ai/platform-overview)