23 Apr 2026

The prediction that agent-initiated queries will surpass human-initiated ones within 12 months sounds dramatic. In consumer credit, it's actually conservative.

We already have decisioning engines, fraud models, and affordability checks firing thousands of automated queries daily against our data infrastructure. The shift being described isn't from zero to one. It's from controlled, scheduled automation to something far messier: agentic workflows that explore data on their own terms, following chains of inference we didn't explicitly programme.

That distinction matters enormously for how we think about governance.

Most UK credit firms have built their data access controls around human behaviour. A human analyst requests a report, that request is logged, someone can audit the trail. When an AI agent starts generating its own queries — deciding what to look at, when, and why — that audit trail gets complicated fast. The FCA cares deeply about explainability in credit decisions. An agent that taught itself to look at certain data combinations because they improved a metric is going to be a hard conversation with a regulator.

The operational risk is just as sharp. Agent-initiated queries don't respect the unspoken courtesies that human analysts observe. They don't know that running a full table scan at 9am on the last day of the month will kill your reporting pipeline. Infrastructure teams who've spent years capacity-planning around human usage patterns are going to get some nasty surprises.

The firms that will handle this well are the ones treating agentic query behaviour as a first-class infrastructure concern right now, before volumes make it a crisis. That means query budgets, rate limiting, and explainability requirements baked into how agents are allowed to access data — the same way we've always governed what humans can see and do.

The interesting question is whether the analytics tooling vendors are building those controls, or whether they're shipping capability and leaving governance to the customer.

The Salesforce and Google Cloud agent integration looks exciting on the surface. Agentforce talking to Google Workspace, actions flowing across Slack, end-to-end workflows stitching together what used to be separate systems. For a technology leader in consumer finance, the interesting question is not whether this is technically impressive. It is who owns the decision when something goes wrong across that boundary.

In a regulated environment, that question is not academic. The FCA expects firms to be able to explain automated decisions that affect consumers. If an AI agent initiates a workflow in Salesforce, hands off to a Google service, and that chain of actions results in a customer outcome — a declined application, a changed limit, a triggered collections event — your compliance team needs a complete audit trail. Right now, the governance tooling for cross-platform agent actions is nowhere near mature enough to give you that with confidence.

The identity and access problem compounds this. Each platform has its own permissioning model. When agents act across both, you are essentially federating trust between two enterprise ecosystems that were not designed to share it. That creates surface area for agents to do things no human explicitly authorised, because the permission existed somewhere in the chain.

Two things UK financial services firms should be thinking about right now:

• What is your policy on AI agents initiating actions in systems your firm does not fully control?
• Who signs off on the governance model before you let cross-platform automation anywhere near customer journeys?

The partnership will mature. The integration will get tighter. But the firms that get into trouble will be the ones who treated this as an IT procurement decision rather than a risk and accountability decision. The technology is moving faster than most firms' change governance can track, and that gap is where regulatory exposure lives.