Read the sample before the findings

The full export contains 919 rows, including invited contacts. There are 314 eligible non-invited applications. After invited-only rows are excluded and responses are deduplicated by email for each question, individual item bases range from 71 to 101, which is 23 to 32 percent of the 314 eligible applications.

That item completion range is a central limitation, not a footnote. The 314 eligible applications are not used as a universal denominator. Every percentage in this report carries its own question base.

Definitions used in this report

TermMeaning in this reportWhat it does not prove
Production agentAn AI agent the respondent counted as running in production in the instrumentThe survey did not independently verify uptime, autonomy, value or control quality
Embedded AIAI whose removal would change the organization's cost structure or hiring planIt is not simply another name for deployed software
Full real-time cost visibilityThe respondent selected “full real-time visibility” for AI operating costsIt is self-reported and was not tested against a required cost taxonomy or audited ledger
Applicable access responseA respondent who selected an access method rather than “not applicable yet”It does not represent all 314 eligible applications

What changed since the Preview

The September Preview relied on small technology-seat cuts from other instruments, with bases of 21 to 32. Edition 1 uses a dedicated production instrument, and each published headline clears Open Future Forum's 40-response publication floor.

The instrument directly measures agent counts, production constraints, operating-cost visibility and agent access to enterprise data. It therefore replaces proxy conclusions with an operator evidence book while retaining the limits of a selective, self-reported sample.

Preview inference versus current test

The distinction matters because a proxy can identify a question without answering it. The September Preview asked whether technical leadership was becoming a production operating role. The current instrument tests that proposition directly through several separate questions.

September Preview questionCurrent October testResult now availableWhat remains untested
Is AI reaching production?Four-stage maturity and production-agent count54 of 91 report deployed or embedded AI; 60 of 75 report at least one production agentIndependent verification of production status, reliability or business value
Is AI becoming a fleet-management problem?Number of production agents22 of 75 report more than twenty agentsWhether respondents count agents consistently or whether every reported agent is material
Can leaders see operating economics?Real-time AI cost visibility34 of 77 report full visibility; among 60 matched agent operators, 30 report full visibilityThe cost taxonomy, accuracy and workflow-level reconciliation behind the answer
What is blocking production?Multi-select bottleneck questionData access and quality leads at 39 percent (29 of 75)Severity, duration and whether a named bottleneck caused delay or failure
How do agents reach data?Enterprise-data access method24 of 49 applicable responses use per-agent credentials and 18 shared service accountsPermission scope, logging quality and whether any configuration meets a specific control standard

October therefore replaces several plausible narratives with measured distributions. It does not convert self-reported answers into audits. The correct step is to use each result to request a more specific production record.

Who answered

Respondent seatCountShare
CEO or founder3636%
Data or AI leader2323%
CTO, CIO or engineering1616%
Other1010%
Investor88%
CMO or marketing44%
CISO or security22%
Board director22%

Base 101.

The sample is operator-led but not exclusively technical. CEO and founder respondents form the largest group, followed by data or AI leaders and technology executives.

Production context and agent fleets

Maturity is context here, not this report's primary question: 54 of 91 respondents report deployed or embedded AI. The AI Transformation Report owns the four-stage chart, complete table and operating-model interpretation. This source report begins its detailed evidence with the production-agent fleet.

Eighty percent of respondents report at least one AI agent running in production, and 29 percent report more than twenty, base 75
Production-agent countCountShare
None912%
1 to 52736%
6 to 201115%
More than 202229%
Not sure68%

Base 75.

Sixty of 75 respondents report at least one production agent, including 22 who report more than twenty. The modal answer is one to five, but the upper tail makes a fleet-level operating view necessary for many respondents.

For an operating model that covers lifecycle states, controlled releases, service tiers, fleet-level containment and retirement, read How to Operate More Than 20 Production AI Agents as a Fleet.

Operating-cost visibility

Forty-four percent of respondents report full real-time AI operating-cost visibility, 39 percent partial and 17 percent none, base 77
Real-time cost visibilityCountShare
Full real-time visibility3444%
Partial visibility3039%
No real-time visibility1317%

Base 77.

The unpaired headline compares 80 percent reporting at least one production agent (base 75) with 44 percent reporting full real-time cost visibility (base 77). The 36-point difference is descriptive because the question bases differ.

The matched analysis is more useful. Among the same 60 respondents who report at least one production agent and answered the cost question, 30 report full visibility, 23 partial visibility and seven none. In other words, half of the matched agent operators select full visibility and half do not.

Ten of eleven respondents with six to twenty production agents report full cost visibility; the over-twenty group splits evenly between full and partial, matched base 60
Agent fleetMatched baseFull visibilityPartial visibilityNo visibility
None922%44%33%
1 to 52737%44%19%
6 to 201191%9%0%
More than 202245%45%9%
Not sure633%33%33%

Matched respondents answering both questions; base 75. Small row bases are directional.

Ten of the eleven respondents reporting six to twenty agents select full visibility. The more-than-twenty group splits evenly between full and partial visibility, with two reporting none. These rows are too small to establish a general relationship between fleet size and cost control.

The maturity cut provides additional context: full visibility is reported by 20 of 33 deployed respondents, compared with four of 18 explorers. This cross-sectional association does not establish causation or movement between stages. The complete exhibit and maturity interpretation appear in the AI Transformation Report.

Where production gets stuck

Data access and quality is the leading production bottleneck at 39 percent, ahead of compute at 29 percent, base 75, any mention
Production bottleneckCountShare
Data access and quality2939%
Compute2229%
Integration with existing systems2128%
Inference cost1925%
Governance and approval1621%
Agent identity and permissions1115%
Talent1115%

Base 75; any mention, so shares can sum above 100 percent.

Data access and quality leads, while compute, integration and inference cost form a second group. The distribution shows that the production problem is not reducible to model choice: data, infrastructure, economics, governance and identity all appear in the answers.

How agents reach enterprise data

Per-agent credentials are the leading agent data-access method at 49 percent among applicable respondents, ahead of shared service accounts at 37 percent, base 49
Access method, all respondentsCountShare
Per-agent credentials2434%
Shared service accounts1825%
Delegated user identity46%
Credential-free or brokered access34%
Not applicable yet2231%

Base 71.

Access method, applicable responsesCountShare
Per-agent credentials2449%
Shared service accounts1837%
Delegated user identity48%
Credential-free or brokered access36%

Base 49.

The applicable cut answers a narrower question: among respondents already using one of the listed access methods, how are agents authenticated? Shared service accounts account for 18 of 49 answers. The all-respondent table retains “not applicable yet” so the report does not imply that every respondent operates agents with enterprise-data access.

Buying authority and planned spend

The CEO is named by 56 percent of the AI Leaders sign-off cohort, base 86, compared with 49 percent across the full common instrument, base 467
Signoff roleCountShare
CEO4856%
CIO or CTO2428%
Business unit1315%
No single owner1113%
Finance1012%

Base 86; any mention, so shares can sum above 100 percent.

Thirty-three of 76 respondents plan at least $100,000 of AI spend, including 16 planning at least $1 million
Planned spend over twelve monthsCountShare
Under $100K3141%
$100K to $1M1722%
$1M to $10M912%
$10M to $100M23%
Over $100M57%
Not sure1216%

Base 76.

The CEO appears in 48 of 86 sign-off answers. Planned spend is widely distributed: 33 of 76 respondents plan at least $100,000, including 16 planning at least $1 million. The bands are too broad, and the sample too selective, to support a credible average or market-size extrapolation.

Production control register

This register is the practical output of the report. It is a management template, not a survey result. Complete one row for every material production agent and reconcile it with finance, security and the business owner.

Register fieldMinimum entryControl question
Agent and versionStable identifier, model and deployment versionCan a reviewer identify exactly what ran?
Business workflowWorkflow served and intended outcomeIs the agent tied to a real operating process?
Accountable ownersBusiness owner and technical ownerWho approves changes and accepts results?
Identity methodPer-agent, shared, delegated or brokered credentialAre actions attributable and access revocable?
Data scopeSystems and data classes the agent can reachIs access limited to what the workflow requires?
Cost recordCost center, unit of work and visibility statusCan operating cost be reconciled without a manual audit?
Service evidenceQuality, reliability and exception measureDoes performance meet the production standard?
Human controlReview, override and escalation pathWho intervenes when the agent is wrong or uncertain?
Last reviewDate, reviewer and unresolved exceptionIs the record current enough for a decision?

The CEO, CFO and CISO production handoff

Production evidence becomes useful when the business, finance and security records describe the same agent and workflow. The handoff below is an operating recommendation derived from the findings, not a surveyed allocation of executive duties.

Executive ownerEvidence receivedDecision that owner makesEvidence returned to the shared record
CEO or business executiveWorkflow purpose, accountable operator, materiality and expected outcomeWhether the workflow belongs in production and which exceptions the organization will acceptNamed business owner, approved outcome, priority and stop or escalation condition
CFOAgent identifier, volume, model and infrastructure costs, human-review cost and budget sourceWhether cost is visible enough to scale and whether the economic case meets the approved thresholdCost center, unit-of-work measure, current run rate, value method and unresolved allocation gap
CISOAgent identity, data scope, permissions, tools, logging and human overrideWhether access is bounded, attributable and revocable; whether an exception requires treatment or acceptanceApproved access method, exception owner, remediation date and incident path
AI or technology leaderAll three decisions plus service and change evidenceWhether the release remains within technical, economic and control boundariesCurrent version, reliability result, change log and reconciled production-register entry

The most important handoff rule is a shared identifier. If finance tracks a platform invoice, security tracks a service account and the business tracks a workflow name without a common key, the company may have three accurate records that cannot be reconciled. The register should bridge those records before a cost challenge or incident forces a manual reconstruction.

What AI leaders want next

Forty-three nonblank, non-invited open-text answers were reviewed qualitatively. Recurring topics include enterprise adoption, agents, infrastructure, deployment and governance. Respondents also ask how to scale agents reliably and connect them to enterprise systems. This is a thematic reading, not a coded distribution, so no percentage shares are assigned.

Tested against the record

Open Future Forum's results can be set beside broader research without treating unlike samples as one benchmark.

External sourceUseful contextOpen Future Forum evidenceLimit on the comparison
McKinsey, State of AI 2026Wider evidence on agent scaling, operating cost and uneven financial impactFleet-size, bottleneck, spend and matched cost-visibility distributions from one operator instrumentDifferent samples and question wording; percentages should not be pooled
IBM, Cost of a Data Breach 2026Context on identity-based access, human attribution and agent auditability18 of 49 applicable responses report shared service accounts, alongside 24 reporting per-agent credentialsThe survey records the selected method, not control quality or breach outcomes
NIST AI Risk Management FrameworkA general structure for governing AI risk across the lifecycleA production register that attaches ownership, access, cost and service evidence to the individual agentNIST is a framework, not a validation of any respondent's implementation

Open Future Forum adds a first-party operator view: data access is the leading named bottleneck, and only 30 of the 60 matched respondents operating at least one production agent report full real-time cost visibility. External sources provide context only; their publishers are not affiliated with this report and do not endorse it.

What this means for the AI leader

For management, the useful operating unit is the individual production agent attached to a workflow, identity, data scope, owner, cost record and service measure. A fleet becomes governable when those fields can be reconciled in one register and reviewed as operating evidence, not reconstructed after an incident or budget challenge.

Questions this report answers

How many respondents run production agents?

Sixty of 75 report at least one production agent, including 22 who report more than twenty.

Can agent operators see what AI costs to run?

Among the 60 matched respondents with at least one production agent, 30 report full real-time cost visibility, 23 partial visibility and seven none.

What is the leading production bottleneck?

Data access and quality is named by 39 percent, ahead of compute at 29 percent, integration at 28 percent and inference cost at 25 percent (base 75, any mention).

How do agents access enterprise data?

Among 49 applicable responses, 24 use per-agent credentials, 18 shared service accounts, four delegated user identity and three credential-free or brokered access.

How much do respondents plan to spend?

Thirty-three of 76 plan at least $100,000 over the next twelve months, including 16 planning at least $1 million. The bands should not be converted into a market-size estimate.

Does reporting a production agent prove that it is autonomous or reliable?

No. “Production agent” is the respondent's answer to the instrument. The survey did not independently test autonomy, uptime, quality, materiality or the control environment around the system.

What is the minimum record for a cross-functional production review?

Use one stable agent identifier linked to the workflow, business and technical owners, access method, data scope, cost center, unit of work, service evidence, human-control path and last review. The record should reconcile CEO or business, CFO and CISO decisions.

Key citable facts

Methodology and honesty notes

This edition uses first-party questions embedded in the Enterprise AI at Microsoft application flow. Its 919-row export contains 314 non-invited applications. Invited-only records are excluded. Respondents are deduplicated by email for each question, with the latest answer retained. Individual item bases range from 71 to 101, or 23 to 32 percent of eligible non-invited applications, because questions were added or completed at different points in the flow. The 314 eligible applications are not used as a universal base.

Multi-select questions use the any-mention convention. No headline is published below 40 responses. The access-method applicable cut excludes respondents who answered “not applicable yet.” Matched analyses include only respondents who answered both relevant questions; their row bases are shown, and small rows are directional.

This is a selective sample drawn from Open Future Forum's network, not a probability sample of all enterprises. Production status, fleet size and cost visibility are self-reported and were not independently audited. Planned-spend bands are reported as bands; no midpoint estimate or market-size extrapolation is made. The open-text section is a qualitative review of 43 answers, not a coded distribution. No causal or longitudinal claim is made from cross-sectional answers.

Citation and editions

Suggested citation: Newlands, M. (2026). AI Leaders AI Leverage Report, Edition 1. Open Future Forum, October 2026. This edition supersedes the September 2026 Preview.

Work These Questions with AI Leaders Peers

The AI Leaders Forum meets through small, off-the-record gatherings. Membership is by application and referral.

Explore the AI Leaders Forum Inquire about membership