# Enterprise agents need data-aware access controls Markdown copy of https://realalpha.app/s/enterprise-agents-need-data-aware-access-controls/ on Real Alpha, the best minutes from long interviews with the people building AI. Cite and link the page, not this copy. - Speaker: [Arthur Mensch](https://realalpha.app/builders/arthur-mensch/) · CEO, Mistral · Co-founded and leads Paris-based Mistral AI as CEO; named to Time's 100 Most Influential People in AI. - Host: [Chamath Palihapitiya](https://realalpha.app/people/chamath-palihapitiya/) · Founder & CEO, Social Capital · Led Facebook's growth team; his firm backed Slack and AI chipmaker Groq. - Host: [Jason Calacanis](https://realalpha.app/people/jason-calacanis/) · Founder & CEO, LAUNCH · Early Uber angel; sold Weblogs Inc. to AOL; hosts This Week in Startups. - Host: [David Sacks](https://realalpha.app/people/david-sacks/) · Co-founder & partner, Craft Ventures · PayPal's first COO, founded Yammer; White House AI & crypto czar 2025–26. - Host: [David Friedberg](https://realalpha.app/people/david-friedberg/) · CEO, Ohalo · Founded The Climate Corporation, sold to Monsanto for about $1.1B in 2013. - Show: All-In - Episode: [Four CEOs on the Future of AI: CoreWeave, Perplexity, Mistral, and IREN](https://realalpha.app/v/-JBhTBu9ZbA/), Mar 23, 2026 - Moment: 1:14:51 to 1:19:03 of the episode (4 min), playing on https://realalpha.app/s/enterprise-agents-need-data-aware-access-controls/; the episode from there: https://realalpha.app/v/-JBhTBu9ZbA/?t=4491 ## Quote > “And so you need to have this layer that actually understands **what is in the data**.” > — [Arthur Mensch](https://realalpha.app/builders/arthur-mensch/) at [1:17:17](https://realalpha.app/v/-JBhTBu9ZbA/?t=4637) · All-In ## Takeaways 1. OpenClaw lacks enterprise governance and process observability. 2. A context engine can block sensitive data by role. 3. Agents may reduce managers' information-routing work. ## About this segment Arthur Mensch says enterprise agents need controls that limit sensitive data by role, plus observability and sandboxes. He argues the resulting information flow can also change management work. From “Four CEOs on the Future of AI: CoreWeave, Perplexity, Mistral, and IREN”, Mar 23, 2026. [Watch the full episode](https://realalpha.app/v/-JBhTBu9ZbA/) ## Transcript Transcribed by machine (Whisper) from the episode’s audio, so a word may be off here and there. [1:15:02](https://realalpha.app/v/-JBhTBu9ZbA/?t=4502) that open claw moment mean well it resonated a lot with what we were doing with our customers uh because pretty quickly uh enterprises realized that if they wanted to make some gains with artificial intelligence generative ai they would need to automate full processes and to automate a full process as an enterprise well you can use open claw but it's going to be uh it's actually not really enough because you you have data problems you have governance problems you can't observe uh the process that is running and you can't control it in um in many cases when you run a kyc process if you're hsbc for instance one of our customers uh you will want to have deterministic gates that are going to always do the same thing in a way that is observable and that you can guarantee the cao that it's always going to go through these gates and that's not [1:15:46](https://realalpha.app/v/-JBhTBu9ZbA/?t=4546) something that OpenFlow is providing, because it doesn't have the kind of primitives that you need to work on collective productivity, observable productivity, and to work on mission-critical systems. On the other hand, the autonomy it gives, and the autonomy it gives, and the autonomy It brings to people that are just individuals that are hacking together things is a way to also show to enterprises that if you set up the right control plane, if you set up the right sandboxes, if you connect to the right data sources, if you make sure that your access controls are well respected, then you can actually unleash the power of agents doing things for your employees. [1:16:19](https://realalpha.app/v/-JBhTBu9ZbA/?t=4579) And that's going to work. Work on the platform because otherwise you will not be at ease when you're sleeping. It is definitely something you have to be thoughtful about. When I installed it, I gave it, just for my agent, root access to my Google Docs and my G Suite, my Notion, my Zoom, and my Notion and G Calendar, everything. And then I realized, wow, I can, with my enterprise edition of Gmail, essentially, I can just summarize for my entire 21-person investment company every conversation going on in Gmail and then correlate it with every conversation in Slack. [1:16:57](https://realalpha.app/v/-JBhTBu9ZbA/?t=4617) And then I realized, oh my gosh, there's compensation discussions going on. There is a person on a PIP who we put them on a performance improvement plan perhaps or something like that. Oh, I have to make sure nobody else can access this because the power comes from giving it access to data, but with great power comes great responsibility. And I think people are learning that in real time. Yeah, it's a big problem because the enterprise data is not a single thing that you want to put into a single system that is going to be accessible by everyone. [1:17:28](https://realalpha.app/v/-JBhTBu9ZbA/?t=4648) And so you need to have this layer that actually understands what is in the data. You need to have a semantic of what can actually be proposed to HR or what can be proposed to engineering. And typically compensation is one of these things. You wanna make sure that the compensation data does not flow back to all of the enterprise because you're going to have a lot of problems if that's the case. And so what you actually need and which is hard to do is what we call a context engine. [1:17:55](https://realalpha.app/v/-JBhTBu9ZbA/?t=4675) So a mapping of where the data sits that comes with a certain number of metadata that is telling you that this data is actually not accessible to this part of the company. And if you actually have someone in engineering that is asking for something related to comp, the thing is actually going to tell you, look, you actually can't access that data. So that's hard. It's actually hard. You need to rethink entirely the way your IT systems are being connected. [1:18:19](https://realalpha.app/v/-JBhTBu9ZbA/?t=4699) And at some point, you also need to think about your management because your information flow is completely different today if you're connecting agents together with your data sources than it used to be. And suddenly, maybe you don't need that manager whose only purpose was to take information from the bottom and put the information on top, et cetera. So there's some IT problems to solve and you need the right primitives, you need sound boxes, you need airbag, role-based access control and these kind of things. [1:18:45](https://realalpha.app/v/-JBhTBu9ZbA/?t=4725) And you have change to do. You need to rethink your entire customer service department because suddenly you actually don't need that much transfer of information operated by humans.