OECD Working Paper: Interviews with 25 Organizations on Agentic AI Deployment and Governance Practices

OECD interviews with practitioners from 25 organizations across 11 countries (including frontier developers, enterprise deployers, public sector, and academia) show that agentic AI is moving from pilots into organizational workflows, but no organization is deploying with unrestricted autonomy. Deployments are concentrated in scenarios where tasks are structured, outcomes verifiable, and error costs controllable or reversible, often using checkpoint mechanisms to introduce human review before high-impact or irreversible actions. On governance, most organizations rely on existing frameworks such as the OECD AI Principles, NIST AI Risk Management Framework, ISO/IEC 42001, and the EU AI Act, layered with sandbox testing, least-privilege access, continuous monitoring, and approved agent registries, but system-level evaluation, traceability and accountability, and cybersecurity remain unresolved challenges.