Executive Summary
Based on developments scaling through 2025 and 2026, enterprise software giants are rapidly migrating from static workflow automation to autonomous, agentic task-execution frameworks. As ISVs and System Integrators (SIs) seek to capitalize on this shift within the EU and UK markets, several strategic and regulatory realities have emerged:
- EU Enterprise Vendor Anchoring: SAP is leading the European-centric platform push, unveiling the "Autonomous Enterprise" vision for 2026 with over 200 embedded AI agents [10] powered by Anthropic's Claude [29], heavily backed by a €100 million partner fund for ecosystem adoption [24].
- Standardized Integration Architectures: Salesforce has standardized around the Model Context Protocol (MCP) in Agentforce v3 (mid-2025) to ensure interoperability [8], while ServiceNow relies on its native AI Agent Studio and Orchestrator to govern multi-agent collaboration and subflow routing [32].
- Emerging ISV Monetization Channels: New, dedicated marketplaces such as Salesforce's AgentExchange are actively allowing ISVs to market and monetize modular agent "Actions" (pre-built integrations and APIs) [18], [19].
- Strict EU AI Act Obligations for Deployers: Enterprises consuming third-party agent workflows are legally classified as "deployers" under the EU AI Act [6]. Using agents for specific functions can classify them as high-risk systems [2], thereby enforcing mandatory Fundamental Rights Impact Assessments (FRIAs) [25] and 6-month continuous logging requirements [26].
1. Enterprise Platform Agent Frameworks (2025-2026)
The vendor landscape has consolidated around modular, natural-language-driven development environments where agents are granted controlled access to enterprise data and operations.
SAP's Autonomous Enterprise Vision
As the dominant EU-based vendor, SAP unveiled its "Autonomous Enterprise" strategy at Sapphire 2026, embedding over 200 AI agents directly into its core business applications [10]. Operating via the newly launched SAP Autonomous Suite, these agents execute cross-functional business processes spanning finance, supply chain, HR, and procurement [9]. To support this technically, SAP expanded its partnership with Anthropic to embed Claude as the primary reasoning engine across its portfolio [28], [29]. For custom development, SAP provides Joule Studio, which relies on a secure runtime provided by NVIDIA to ensure hardware-level isolation and safety [5].
Salesforce Agentforce v3
In mid-2025, Salesforce released version 3 of its Agentforce platform, fundamentally altering how its AI systems mimic human-like decision-making via Natural Language Processing (NLP) [17]. A critical technical leap was the native adoption of the Model Context Protocol (MCP) for interoperability [8]. This standardized approach allowed over 30 launch partners—including IBM, AWS, Stripe, and Box—to seamlessly pipe cloud platforms, payment gateways, and external data services directly into the Agentforce reasoning engine [27].
ServiceNow AI Agent Studio & Orchestrator
ServiceNow has focused heavily on the administrator and developer experience via the AI Agent Studio, a dedicated environment accessed via All > AI Agent Studio > Overview [14], [16]. The studio allows developers to build custom agents via natural language interfaces [13].
Complex tasks are managed by the AI Agent Orchestrator, which governs task ownership, sequencing, and data flow [32]. This enables complex multi-agent collaboration. For example, one agent can be tasked with data extraction, another with workflow routing, and a third with human escalation [34].
2. ISV Co-Sell & Marketplace Engagement Models
For Independent Software Vendors (ISVs) and SI partners, deploying agentic tools into these platforms requires aligning with emerging platform-specific monetization and distribution channels.
Salesforce: The AgentExchange Marketplace
To accelerate third-party development, Salesforce launched AgentExchange, a dedicated marketplace strictly for AI agents [19]. ISVs do not necessarily need to build full autonomous agents; instead, they can monetize modular components called "Actions." Actions provide the specific capabilities—such as pre-built integrations, customized flows, and API connections—that extend an enterprise's native agents [18].
ServiceNow: Native Tooling & Store Apps
Integrating into ServiceNow workflows is highly procedural. ISVs must package their capabilities as ServiceNow "Tools," which can manifest as Catalog items, Flow actions, Now Assist skills, Scripts, or Subflows [33].
To expose these agentic workflows in enterprise workspaces (such as Service Operations or CSM), ISVs must ensure specific configuration criteria are met:
- Plugin Requirements: The
com.glide.ai_record_activityplugin must be installed alongside the Now Assist platform apps [31]. - Version Constraints: The ServiceNow Store app must be running at least version 12.0.11 [31].
- Interface Configuration: Admins must configure UI actions within the AI Agent Studio's "Select channels and access" step [11], [30]. End users will interact with the workflows via UI16 workspace buttons [12] or the dedicated Now Assist Panel [35].
For highly regulated sectors, specialized ISVs offer governed overlay environments. For example, USDM's ProcessX serves as a governed workflow layer, ensuring that ServiceNow AI Agents adhere to GxP-aware workflows for life sciences compliance [15].
SAP: Co-Innovation Funding
Rather than purely relying on a self-serve marketplace, SAP has incentivized integration financially, launching a €100 million partner fund designed explicitly to accelerate customer deployment and adoption of SAP-built AI assistants and third-party agents [24].
Comparison of ISV Engagement Models
| Vendor | Developer Environment | Ecosystem Interoperability | Monetization / Partner Strategy |
|---|---|---|---|
| Salesforce | Agentforce | Model Context Protocol (MCP) | AgentExchange Marketplace (Selling "Actions") |
| ServiceNow | AI Agent Studio | Native Tools (Flows, Subflows, Scripts) | ServiceNow Store Apps & Specialized Overlays (e.g., ProcessX) |
| SAP | Joule Studio | Anthropic Claude Engine + NVIDIA Runtime | €100M ecosystem partner deployment fund |
3. Operational Risks & EU AI Act Regulatory Constraints
For European enterprises (and global firms operating in the EU), deploying agentic workflows introduces severe compliance overhead under the recently enacted EU AI Act. The Act classifies AI applications into three distinct risk categories, with systems presenting an "unacceptable risk" (e.g., government-grade social scoring) facing outright bans [3], [22].
Deployer Liability and Compliance Obligations
Enterprises purchasing and running third-party AI agents (from vendors like Salesforce or ServiceNow) are legally classified as "deployers" under the Act [6]. This classification shifts the burden of operational compliance onto the enterprise itself, rather than solely the vendor.
Under the Act, agent risks are governed by provisions for both general-purpose AI (GPAI) and high-risk systems, heavily dependent on the specific use case [2]. If an AI agent executes tasks categorized as high-risk, the deployer faces strict operational mandates:
- Risk Management: Adequate risk assessment and continuous, iterative risk management throughout the system's lifecycle (Article 9) [7], [20].
- Fundamental Rights Impact Assessments (FRIAs): Deployers operating high-risk systems in public services, or in specific cases like credit/insurance assessment, must conduct FRIAs before turning the agent on [25].
- Auditability & Traceability: The systems must possess automatic logging capabilities, and deployers are legally mandated to retain these event logs for a minimum of six months [26].
Furthermore, providers of General-Purpose AI models with Systemic Risk (GPAISR) are legally required to assess and mitigate the downstream systemic risks originating from any agents built on top of their models [21].
Frictions Between Agent Architectures and EU Regulation
Technical realities of autonomous agents currently clash with the EU AI Act’s assumptions:
- Privacy-by-Design Flaws: The EU AI Act assumes data is gathered at discrete moments for strictly defined purposes. Agentic workflows, however, continuously collect, reason upon, and transfer data across contexts that users might normally expect to remain compartmentalized [23].
- The Accuracy Metric Mismatch: High-risk AI systems must meet stringent standards for robustness, cybersecurity, and accuracy [1]. However, applying a static accuracy metric to an agentic workflow is flawed. It presupposes a single determinate standard of correctness, which fails to account for complex, multi-objective agent goals—such as allocating housing assistance while simultaneously balancing speed, equity, and fraud prevention [4].
4. Limitations & Open Questions
While this report details the architectures for SAP, Salesforce, and ServiceNow, certain gaps remain based on available evidence:
- Missing Vendor Footprints: The provided evidence yields no technical or marketplace data for Atlassian, Capgemini's internal agent IP (beyond consulting commentary), or Accenture.
- Marketplace Economics: While Salesforce's AgentExchange is confirmed to allow ISVs to monetize components, the exact revenue-share models and vetting times for ISV "Actions" remain undefined.
- EU Data Residency for Agents: While SAP relies on a secure NVIDIA runtime [5], it remains unclear how the routing of data through external orchestration engines (like Anthropic Claude) satisfies localized EU sovereign cloud requirements when executing high-risk agentic tasks.
5. Sources
- [1] AI Act [government] — https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai · government
- [2] How AI Agents Are Governed Under the EU AI Act — https://thefuturesociety.org/how-ai-agents-are-governed-under-the-eu-ai-act/ · professional
- [3] EU Artificial Intelligence Act | Up-to-date developments and analyses of the EU AI Act — https://artificialintelligenceact.eu/ · professional
- [4] The EU AI Act is Not Ready for Agents — https://www.techpolicy.press/the-eu-ai-act-is-not-ready-for-agents/ · professional
- [5] SAP Unveils Autonomous Enterprise Vision With Unified AI Platform And Deepened Industry Partnerships — https://pulse2.com/sap-unveils-autonomous-enterprise-vision-with-unified-ai-platform-and-deepened-industry-partnerships/ · general
- [6] EU AI Act Compliance: What Enterprise AI 'Deployers' Need to Know — https://sentra.io/learn/eu-ai-act-compliance-what-enterprise-ai-deployers-need-to-know · professional
- [7] A Deep Dive in the European AI Act: What it Means for Your Organization — https://nestr.io/blog/eu-ai-act-ai-agent-governance · professional
- [8] Enabling autonomous AI agents at scale — https://www.capgemini.com/insights/expert-perspectives/enabling-autonomous-ai-agents-at-scale/ · professional
- [9] SAP Autonomous Enterprise