← All AI Engineer talks

AI Engineer Summit 2025

Privacy First Enterprise AI: Building AI Agents that Never Leave Your Security Boundary

Read the talk

Build Enterprise AI Into the Systems Employees Already Use

Enterprise agents can use familiar channels and established controls. Steven Moon’s architecture starts with private compute, managed identities and email rather than another portal.

From a talk by Steven Moon

Another agent, another portal

How do you deploy an AI agent without making it another external system to manage? For Steven Moon, founder of Aech AI, the starting point is an agent that operates entirely within an enterprise’s existing security boundary. Model capability and prompt quality are only part of that problem: deployment must also respect security, compliance and workflows that organizations have spent years establishing.

Language models introduce a useful possibility: software can understand requests and context, then interact through the same interfaces people use. Yet a new enterprise agent often arrives with another portal, another set of credentials and another security review. That adds a barrier between employees and the capability the agent provides, even when employees already have a suitable place to request the work.

Slide listing external systems, portals, credentials, and barriers, alongside the proposal to build applications that work the way humans do.
The AI Engineering Challenge: more external systems, portals, credentials, and barriers.

Moon connects this mismatch to Satya Nadella’s forecast about business software, paraphrasing it as the death of SaaS. His interpretation concerns traditional SaaS interfaces: if agents become the primary way people interact with business systems, building a fresh dashboard for every agent reproduces the interface pattern those agents could replace. This is a forecast about how work reaches software, rather than evidence that business systems themselves have disappeared.

0:040:22
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

0:04 · section reference included

Give agents employee-like boundaries

An agent should operate under the same kinds of constraints as an employee. It should follow security policies, use approved systems, stay within data boundaries, access only what its work requires, and remain subject to monitoring and audit. Treating the agent as a digital worker makes those requirements part of its deployment, rather than features to add after it becomes useful.

The infrastructure for those constraints already exists in many enterprises. Moon identifies secure compute, identity management, data governance, compliance frameworks and audit capabilities, then proposes running agents in private clouds while keeping data within tenants.

Existing foundationRole in agent deployment
Secure compute and private cloudPlace agent execution inside the boundary
Identity managementEstablish who the agent is
Data governance and security policiesConstrain what it can access
Audit and monitoringRetain oversight of its activity

Moon says most enterprises have a private cloud suitable for this approach. The architectural requirement is to identify the organization’s actual approved execution environment and preserve its controls and workflows.

This changes the first interface-design question. Before creating another portal, ask whether the capability can be delivered through a system users already know and trust. If software can understand a request directly, an additional interface may be an unnecessary translation step between the employee’s intent and the work.

2:012:14
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

2:01 · section reference included

Provision agents through familiar IT tools

Aech AI’s chosen foundation is Microsoft 365 and Azure. Their value here goes beyond email delivery and cloud compute: enterprises have already integrated these platforms into security and compliance processes. Building there lets an agent reuse established infrastructure and administrative relationships. It does not automatically make the resulting application compliant; customers still own decisions about data, identities, configuration and access. That distinction is explicit in Microsoft’s current shared-responsibility guidance.

Moon invokes Jensen Huang’s CES discussion of agentic AI, describing IT as the future HR department for agents. The practical version is a familiar administrative sequence:

  1. Create an agent account using the organization’s existing Active Directory tools.
  2. Apply standard security policies.
  3. Assign the permissions needed for its work through familiar administration interfaces.
  4. Use existing audit and monitoring tools to supervise its activity.

The employee analogy describes how IT manages the agent; it does not determine its effective authorization. For a Microsoft 365 implementation, the distinction between delegated and application access matters: delegated access is bounded by the signed-in user’s access, whereas application permissions operate without that user. The current Microsoft Graph permissions model documents this distinction; Moon does not identify Graph as Aech AI’s implementation. These current security details clarify the deployment requirements without establishing the configuration used in the talk.

The resulting lifecycle is recognizable to IT: onboarding, access assignment, permission management and ongoing monitoring. Moon’s proposal is to manage the AI workforce through those established practices, avoiding a separate administrative system for every new agent.

3:203:33
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

3:20 · section reference included

Use email for agent-to-agent coordination

Email can carry more than a human’s request to an agent. Agents can email one another to share information and coordinate work, using the same communication infrastructure that employees use to collaborate. The channel therefore becomes part of the coordination architecture, with messages available for inspection through established enterprise systems.

Moon describes every interaction as logged and auditable, with permissions enforced automatically and data flows kept transparent and controllable. Email integration alone does not establish complete agent tracing. Microsoft’s mailbox-auditing documentation describes coverage for selected actions, with configuration, bypass and licensing considerations. The useful engineering distinction is between retaining evidence of mailbox activity and recording the agent’s complete execution. Existing permission systems likewise enforce the access actually configured for the agent.

Aech AI chose Microsoft’s ecosystem, but Moon proposes the same pattern for Google Workspace and other enterprise platforms. The reusable architectural ingredients are built-in identity management, established security controls, compliance frameworks and enterprise APIs. Porting the pattern means finding those foundations in the target platform and configuring them to support observable, controllable collaboration.

4:404:48
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

4:40 · section reference included

Find the work before building the interface

Reusing enterprise infrastructure leaves more engineering effort for new capabilities and the problems they solve. Aech AI chose email because it is universal and trusted, but email is only one entry point. The broader approach is to enhance systems the organization has already spent years securing and refining.

Document management systems, internal messaging platforms and workflow tools are other candidates. Once an agent can understand human intent, each can become a gateway to an AI capability. The design exercise begins with where work already happens: which systems are available, what employees do there, and how an agent could enhance that work. Only then does the question of building a new system arise.

The result may be quiet intelligence inside the tools customers already use every day. Moon closes with the prospect of direct understanding reducing the need for mandatory translation layers between humans and machines. The architectural opportunity is to let that understanding reach employees through trusted systems, while keeping the agent’s execution, access and oversight within the enterprise’s established boundaries.

Slide titled The Path Forward with four colored questions: What systems do we have? Where is work happening? How can we enhance it? Why build something new?
The Path Forward: examine existing systems, locate work, and ask how to enhance it.
5:385:50
Suggest correction

This note stays in this page until you copy or download it. Nothing is submitted; reloading clears the draft.

5:38 · section reference included

Resources

From the talk

  • Agent AechDocumentation0:04

    Aech AI's current product overview describes agent workflows through email, shared inboxes and Microsoft Teams.

Updates since the talk

  • Current Azure guidance explains which security responsibilities remain with customers across cloud deployment models.

Read the complete timestamped transcript
  1. 0:04

    Hi, I'm Steven Moon, founder of Aech AI. We're building enterprise AI agents that operate entirely within existing security boundaries. Today, I want to share a different perspective on enterprise AI deployment, one that leverages decades of enterprise infrastructure instead of building parallel systems.

  2. 0:22

    For those of us building AI agents and solutions, the challenge isn't just about powerful models or clever prompts. It's about deploying these digital workers in a way that respects enterprise security and compliance and workflows that organizations have spent years perfecting.

  3. 0:40

    As AI engineers, we're at a unique moment in computing history. For the first time, we can build software applications that understand us directly and are able to use the same interface as people do.

  4. 0:54

    LLMs represent a new computing paradigm, one where AI agents can reason about requests, understand context, and interact naturally through existing channels. Yet, as we race to deploy AI agents in enterprises, we're falling back into old patterns.

  5. 1:12

    Every new AI agent becomes another s- external system, another portal, another set of credentials, another security review. Instead of embracing this new paradigm where agents can use the same interfaces as humans and understand us directly, we're building more barriers between users and, and the new capabilities that we're able to provide them.

  6. 1:32

    In a recent interview, Satya Nadella, CEO of Microsoft, made a striking observation about the future of business software.

  7. 1:40

    He basically said SaaS is dead. He's describing a fundamental shift, the death of traditional SaaS interfaces, as AI agents become the primary way we interact with business systems. Yet here we are building new AI portals and dashboards, recreating the very pattern that's becoming obsolete.

  8. 2:01

    Enterprise AI agents should work like any other employee, following security policies, using approved systems, staying within data boundaries, accessing only what's needed, and being monitored and audited just like human employees.

  9. 2:14

    The good news, enterprises already have everything needed: secure compute environments, identity management, data governance, compliance frameworks, and audit capabilities. These systems have been refined and hardened over decades, and they...

  10. 2:29

    in most companies, most enterprises have their own private cloud where we can execute AI agents within their security boundary. Modern AI infrastructure lets us run agents in private clouds, keep data within tenants, use existing security controls, leverage current workflows, and maintain complete oversight.

  11. 2:48

    The technology exists today to deploy AI with the same privacy controls we apply to human employees. Every time we reflexively create a new interface for AI agents, we're potentially solving yesterday's problem.

  12. 3:00

    We're building translation layers between humans and machines at exactly the moment when machines can finally understand us directly. Before we redesign another portal or a dashboard, we should ask, "Could this capability be delivered through systems our, our users already know and trust?"

  13. 3:20

    As AI engineers, we often overlook the power of existing enterprise infrastructure that's right in front of us. At Aech AI, when we look at Microsoft 365 and Azure, we're not just seeing email and cloud services.

  14. 3:33

    We're looking at battle-tested platforms that enterprises have spent years integrating into their security and compliance frameworks. By building on these platforms, we inherit all that trust and infrastructure into our AI agents.

  15. 3:46

    What makes this approach particularly powerful for IT departments is how AI agents can be provisioned exactly like human employees. At CES, Jensen Huang captured this transformation perfectly when he said, "In a lot of ways, the IT department of every company is going to be the HR department of AI agents in the future."

  16. 4:07

    He's right. This is exactly how it should work. Let's think about it. IT teams can create agent accounts using their existing Active Directory tools, apply standard security policies, set permissions through familiar interfaces, and use their existing audit and monitoring tools.

  17. 4:23

    There's no new system to learn, no special handling required. It's just another employee to manage through tools they've used for years. IT becomes the HR department for your AI workforce, managing onboarding, access, permissions, and monitoring through familiar systems.

  18. 4:40

    But here's where it gets really interesting for us as engineers. Email opens up a powerful pattern for agent-to-agent communications.

  19. 4:48

    Just as humans use email to collaborate and share information, our AI agents can email each other to share data and coordinate work. Every interaction is fully logged and auditable.

  20. 5:00

    Permissions are enforced automatically through existing systems. Data flows are transparent and controllable. This creates a framework for building observable, controllable AI systems at enterprise scale. While we chose Microsoft's ecosystem at Aech AI, these same patterns work with Google Workspace or other enterprise platforms.

  21. 5:20

    The key insight for us as AI engineers is that we can leverage existing enterprise infrastructure rather than building parallel systems. These platforms give us built-in identity management, established security controls, proven compliance frameworks, and enterprise-grade APIs.

  22. 5:38

    This means we can focus our energy on building new capabilities, solving new problems, instead of reinventing infrastructure that already works. The future of enterprise AI isn't about building new interfaces for agents.

  23. 5:50

    It's about enhancing the systems we've spent decades perfecting. At Aech AI, we chose email because it's universal and trusted. But that's just one example of how we can rethink AI agent integration.

  24. 6:03

    Every enterprise has existing systems that have been hardened, secured, and refined over years of real-world use. Think about your document management systems, your internal messaging platforms, your workflow tools.

  25. 6:14

    Now that we can write software agents that directly understand human intent, each of these systems becomes a potential gateway for AI capabilities. This represents a fundamental shift in how we approach enterprise AI adoption and application development generally.

  26. 6:31

    Instead of asking, "What new tools do we need to build?" We should be asking, "Which of our existing systems can we enhance with AI agents?" The most powerful solution might not be a new interface or a new system at all.

  27. 6:43

    It might just be the quiet intelligence we add to the tools our customers already trust and use every day. The era of mandatory translation layers between humans and machines is ending.

  28. 6:56

    The era of direct understanding and seamless AI collaboration has begun. Thank you very much for, for listening. Please feel free to reach out if you have any questions. Thank you.