Home01 Services02 Agent Passport03 Sectors04 Proof05 Pricing06 Self-Assessment07 About08 Contact09

The AI control system for enterprise

AI arrived before the controls did.

AI is already in your organisation. The question is not whether to adopt it. It is whether you control it. Ambient Agent® installs the operating model, governance structure and control system that enterprise AI adoption requires. Deployed in weeks. Designed to be owned and operated by your team.

Scroll
Control before scale. Evidence before expansion. Deployed in weeks · Owned and operated by your team Ambient Agent — registered trademark

We do not sell ambient agents. We make AI governance ambient. Ambient Agent is not an AI agent product. We design and install the AI Control System: the access rules, evidence requirements, approval workflow, register and reporting that let an organisation adopt AI safely.

01 / The problem

Most organisations have already lost control.

AI adoption is accelerating without the structures to manage it. Adoption is fragmented across teams, tools and vendors with no central line of sight. The gap is not a knowledge problem. It is a control problem.

EXP—01

Usage is invisible

No unified view of which AI tools are active, who is using them, or what data they access.

RISK
EXP—02

Costs are unmanaged

Spend is distributed, duplicated and largely outside financial controls. No consolidated view of AI investment or return.

RISK
EXP—03

Risk is increasing

Regulatory exposure, data leakage and reputational risk grow with every uncontrolled deployment. Audit trails do not exist.

RISK
EXP—04

Adoption is fragmented

Teams move independently. No shared standards, no common capability model, no governance layer.

RISK
Why this happens

02 / The position

Ambient Agent is not a tool. It is an operating model. It sits above your platforms, governing how AI is selected, deployed, measured and scaled.

"You have policy. You do not have enforced control."

The market gap
Core principle Control before scale Evidence before expansion
What Ambient Agent is, and is not

03 / How it deploys

Diagnostic. Install. Live governance.

A gated deployment sequence: a two-week diagnostic, a five-stage install of six to twelve weeks, then live governance owned and operated by your team. Every transition passes a control gate. No stage advances on intent.

Deployment timelineAA·DG·TIMELINE
Deployment timeline: diagnostic, install, live governance A gated timeline from the AI Control Diagnostic through the five-stage install to live governance owned by the client. Every transition passes a control gate. PHASE A Diagnostic Usage map, risk posture, capability baseline, plan. 2 WEEKS GATE PLAN AGREED PHASE B — CONTROL SYSTEM INSTALL Six to twelve weeks. Five stages. Gated. 01 MobiliseWK 1 02 DesignWK 2 03 PrepareWK 3–4 04 ExecuteWK 5–6 05 ScaleONGOING ONE CONTROL GATE PER STAGE — NO STAGE ADVANCES ON INTENT GATE EVIDENCE OF READINESS PHASE C Live governance Owned and operated by your team. ONGOING DEPLOY · PROVE · ENABLE · EXIT OR EXPAND Not a long-term embedded consultancy model. The system is designed to be owned by the client.
The full operating model and five stages

04 / Agent Passport™

Structured access. Personal accountability.

The Agent Passport is the capability-based access model at the centre of the control system. Every person who uses AI in your organisation is passported to the level appropriate to their role and training.

LEVEL 1AA·PPT·L1

Consumer

Governed access only

Understands AI outputs and uses approved tools within defined parameters. No build capability.

Assessed
· Ambient Agent ·
Control
LEVEL 2AA·PPT·L2

Practitioner

Structured workflows

Configures and applies AI within structured workflows. Can adapt approved tools to business context.

Assessed
· Ambient Agent ·
Control
LEVEL 3AA·PPT·L3

Builder

Highest capability tier

Designs and deploys AI agents and integrations. Subject to full governance, security review and sign-off.

Assessed
· Ambient Agent ·
Control
How passporting works

05 / Proof

The system holds up in production.

Figures from a deployment inside a UK regulated services organisation. Details are sanitised for commercial use. Independently assessed.

80+Stakeholders engaged

In an independent 8-week maturity assessment.

574+Professionals capability-mapped

Baselined with personalised pathways.

10+Business units

One operating model.

£230k+Identified saving

Identified and documented from a single intervention.

6wksTo live governance

Design to live, running concurrently.

Read the full case study

06 / The regulatory clock

The obligations are already running.

Regulation (EU) 2026/1744, the Digital Omnibus on AI, entered into force on 27 July 2026 and reset some EU AI Act deadlines. It removed none of them. UK regulators are not waiting for statute: accountability expectations apply through existing frameworks today.

Live — since 2 February 2025

AI literacy obligation

Article 4 of the EU AI Act (Regulation (EU) 2024/1689) has applied since 2 February 2025 and requires deployers to take measures to support AI literacy among their staff. It was amended by Regulation (EU) 2026/1744, in force 27 July 2026. National authorities have supervised and enforced it since 2 August 2026. A capability baseline is how you evidence it.

Live — since 2 August 2026

Transparency obligations land

Article 50 of the EU AI Act applies from 2 August 2026. People must know when they are interacting with AI, and AI-generated content must be identifiable. Systems placed on the market before that date have until 2 December 2026 to meet the machine-readable marking duty.

2 December 2027

Stand-alone high-risk obligations

Under Regulation (EU) 2026/1744, in force 27 July 2026, obligations for Annex III stand-alone high-risk AI systems apply from 2 December 2027: risk management, documentation, human oversight, logging.

2 August 2028

AI embedded in regulated products

Obligations for Annex I AI embedded in regulated products apply from 2 August 2028 under the same Regulation. Product-embedded AI joins the same evidence and oversight regime.

FCA — in force now

SM&CR accountability and Consumer Duty

A named senior manager is accountable for AI outcomes. AI used in customer decisions must evidence good outcomes and avoid foreseeable harm. Governed through existing frameworks, not a new AI statute.

ICO — statutory duty

Code of practice on AI and ADM

SI 2026/425, in force 12 May 2026, requires the Information Commissioner to prepare a statutory code of practice on AI and automated decision-making under sections 124A and 124B of the Data Protection Act 2018. The code is in development. Data protection expectations for AI are being codified, not relaxed.

Every regulator asks the same question: can you evidence control at the point of use?

How this lands in your sector

07 / Pricing

Priced in the open.

No form to fill in before you see a number. The diagnostic is the entry point, and it is credited against the install.

AI Control Diagnostic — £15,000 to £20,000, plus VAT where applicable.

Credited in full against an install within 90 days.

Full engagement pricing

08 / How to begin

Start with the Diagnostic.

A structured two-week assessment that shows you exactly where you are, what is controlled, what is not, and what the system install would look like for your organisation. It creates clarity, not commitment.

Book an Alignment Session contact@ambientagent.co.uk

What the diagnostic delivers

D·1

A complete map of current AI usage, tools and data exposure across your organisation.

D·2

A risk posture assessment aligned to your regulatory context and sector requirements.

D·3

A capability baseline for your workforce using the Agent Passport framework.

D·4

A prioritised value map: where AI can deliver measurable outcome in the next 90 days.

D·5

A configured Ambient Agent deployment plan, scoped to your environment and risk appetite.