India, Oct. 1 -- Indian enterprises have broadly established policies governing artificial intelligence (AI) access to corporate data, but those policies are not consistently translating into controls at the point where AI tools and agents act, according to Delinea's 2026 Identity Security Report: The AI Enforcement Gap.

The report found that 99% of Indian organisations surveyed have a formal policy governing what data AI tools and agents can access. However, 84% said an AI tool or agent had accessed sensitive data beyond its intended scope during the past year.

The finding points to a gap between governance and enforcement as enterprises expand AI access to employee information, customer data, financial records, source code and other s...