Daniel Reyes, YuSMP Group
Daniel Reyes Principal Engineer (AI/ML), YuSMP Group · LLM systems, agents and secure AI tooling for production
Isometric illustration of a control console monitoring dashboards while small robot agents travel along blue guarded lanes through an amber permission gate, with floating key and card icons

The short answer

On 22 July 2026 OpenAI introduced Presence, an enterprise platform for defining, deploying, evaluating and improving AI agents across voice, chat and other channels. Instead of another model release, Presence is an operational layer: a shared foundation for company context, policies, permissions, guardrails, actions and evaluations, where each agent is scoped to a single job and given only the knowledge and system access that job needs. OpenAI runs it on its own English-language phone support line and reports the agent resolves roughly 75% of inbound requests without a human, matching representative quality within weeks, with a Codex-powered loop cutting handoffs by 15 percentage points in ten days.

The interesting part for anyone shipping AI agents into production is what OpenAI chose to sell. Not a smarter model, but the machinery around it, guardrails, simulation, evaluation and least-privilege access. That is a public admission from the model vendor itself that the bottleneck in enterprise agents has moved from capability to control.

What OpenAI announced

Presence, announced on 22 July 2026, is pitched as the layer that turns a capable model into a production agent an enterprise can trust. OpenAI describes it as a shared foundation for company context, policies, permissions, guardrails, actions and evaluations, so agents deliver a consistent experience across voice, chat and other channels while adapting to the specific workflow they support. Crucially, each deployment starts from a narrow job, resolving a billing issue, supporting an insurance claim, handling an IT service request, and the agent receives only the knowledge and system access that job requires.

Two mechanisms stand out. First, guardrails that block risky actions, for example limiting which product databases an agent may touch, paired with a built-in simulation tool that generates edge cases to test whether those guardrails actually hold. Second, a post-deployment improvement loop powered by OpenAI's Codex assistant that monitors output quality, tracks metrics such as how often the agent escalates to a human, and proposes changes. OpenAI is its own reference customer: Presence powers its English-language phone support at 1-888-GPT-0090, where it says the agent resolves about 75% of inbound requests, matched representative quality within a few weeks, and, via the Codex loop, cut human handoffs by 15 percentage points in ten days.

Distribution tells you who this is for. Presence is a limited general-availability product delivered with OpenAI Forward Deployed Engineers and select partners, not a self-serve SDK. OpenAI names BBVA, Japan's SoftBank and IAG among the enterprises exploring it. Treat the performance numbers as directional: they come from one deployment, OpenAI's own, and a support use case that is unusually well-suited to automation.

Why the shift is from models to guardrails

For two years the enterprise agent story was a capability story: bigger context windows, better tool use, cheaper tokens. Presence is a different admission. When the company that sells the model chooses to also sell the policies, permissions, guardrails and evaluations wrapped around it, the message is that raw capability is no longer the thing standing between a demo and production. The blocker is trust, and trust is an engineering property, not a model property.

That tracks with what breaks real deployments. Agents rarely fail because the model cannot reason; they fail because they took an action they should not have, touched data they should not have seen, or degraded silently after launch. The fixes are unglamorous: scope permissions to the minimum, put hard guardrails around irreversible actions, simulate the edge cases before real users find them, keep a human in the escalation path, and measure quality continuously so regressions surface as alerts rather than complaints. Presence productises exactly that list, which is the clearest signal yet that the industry's centre of gravity has moved from prompt-and-model to permission-and-policy.

Does this end the build-vs-buy debate?

Not quite, but it sharpens it. Presence is compelling if your agents fit its shape, discrete customer- or employee-facing jobs, and you are willing to work inside OpenAI's model family and its Forward Deployed Engineering model. You get a governance stack you would otherwise spend months assembling, plus a vendor with a strong incentive to make the reference deployment look good.

The trade-offs are the usual ones, made concrete. It is a limited-availability, partner-led program, so it is not something a mid-market team switches on next week. It concentrates your agent layer on a single vendor, which matters if you are pursuing model portability or want to route different jobs to different providers. And a platform that scopes permissions and runs evaluations still needs someone to decide what those permissions and evaluations are, which is your domain knowledge, not OpenAI's. For many teams the realistic answer is hybrid: buy the governance pattern where it fits, and build the same controls, permission scoping, guardrails, evals, escalation, on your own orchestration where you need independence. Either way, Presence has usefully published the specification for what "production-ready agent" now means.

What it means for US & EU software teams

The first implication is a checklist, not a purchase order. Whether or not you ever touch Presence, its architecture is a good audit of your own agents. Is each agent scoped to one job with least-privilege access, or does it hold broad credentials "to be safe"? Are there hard guardrails on irreversible or high-value actions, and have you simulated the edge cases, or are you relying on the prompt to behave? Is there a defined escalation path to a human, and continuous evaluation that catches quality drift? If any answer is no, that is your backlog, independent of vendor.

The second implication is regulatory, and it lands hardest in FinTech and other regulated sectors. An agent that verifies a caller, reads account context and takes approved actions is a data-processing and decision-making system. That pulls it inside GDPR's data-governance expectations and, for higher-risk uses, the EU AI Act's requirements around logging, human oversight and evaluation. A platform that enforces least-privilege access and records evaluations helps you evidence those controls, but accountability does not transfer to the vendor: you still have to show which data each agent can reach, how a human stays in the loop, and how you tested it before and after launch. Design the permission scope and the audit trail as first-class deliverables, not afterthoughts.

The third is organisational. OpenAI shipping Forward Deployed Engineers with the product is a tell: even with a platform, someone has to integrate it with your systems, encode your policies, and own the evaluations. That work does not disappear if you build instead of buy. Budget for the governance engineering either way, because the failure mode, an over-permissioned agent taking a wrong action in production, costs far more than the guardrails would have.

What to do this week

A short sequence to turn the announcement into action rather than FOMO:

  1. Inventory your agents by job and privilege. List each agent in production or pilot, the single job it does, and exactly which systems and data it can reach. Flag any that hold broad credentials for convenience.
  2. Put hard guardrails on irreversible actions. Anything that moves money, changes records, or contacts customers should be gated by explicit rules, not left to model judgement. Then simulate the edge cases that would abuse them.
  3. Define the human escalation path. Decide when and how an agent hands off to a person, and measure how often it does, a rising handoff rate is an early quality signal.
  4. Stand up continuous evaluation. Score agent outputs against a fixed test set on every change, so regressions appear as failed evals rather than user complaints.
  5. Decide build vs buy per job, not per company. Where an agent fits a platform's shape, evaluate buying the governance layer; where you need model independence, build the same controls on your own stack.

None of this is a reason to slow down on agents, the productivity case is real and the tooling is maturing fast. It is a reason to industrialise them: scope, guard, test and monitor, so each new capability is an asset under control rather than an incident waiting for a trigger.

Frequently asked questions

What is OpenAI Presence?

Announced on 22 July 2026, Presence is an enterprise platform for defining, deploying, evaluating and improving AI agents across voice, chat and other channels. It provides a shared foundation for company context, policies, permissions, guardrails, actions and evaluations, and scopes each agent to a single job with only the access that job needs. It is delivered through a limited general-availability program with OpenAI Forward Deployed Engineers and partners.

How well does Presence perform?

On OpenAI's own English-language phone support line, the company says the agent resolves about 75% of inbound requests without a human and matched representative quality within a few weeks. A Codex-powered improvement loop cut human handoffs by 15 percentage points in ten days. These are OpenAI's figures from a single, favourable deployment, so treat them as directional rather than guaranteed.

How is Presence different from building on the OpenAI API?

The API and Agents SDK give you the model, tools and orchestration. Presence adds the operational layer: policies, permission scoping, guardrails that block risky actions, a simulation tool to stress-test them, escalation rules and continuous evaluation. Its premise is that the hard part of production agents is constraining, testing and monitoring what the agent can do, not calling the model.

Does Presence remove the need for engineering work?

No. It ships with Forward Deployed Engineers because deployment is the work: integrating systems, designing per-job guardrails and permissions, writing evaluations and wiring human escalation. Teams still own integration, data-access scoping, testing and compliance. Presence changes what you build, from a bespoke governance stack to configuration on one, rather than removing the need to build.

What are the compliance implications for regulated teams?

An agent that takes approved actions in production systems is a data-processing and decision-making component, so it sits inside GDPR data-governance and, for higher-risk uses, the EU AI Act's expectations for logging, human oversight and evaluation. Least-privilege access and recorded evaluations help evidence those controls, but accountability stays with the deploying organisation. Scope permissions to the minimum, keep a human in the escalation path, and document how you test each agent.

Sources

OpenAI — Introducing OpenAI Presence, 22 July 2026 (primary source)
VentureBeat — OpenAI unveils Presence, a platform to launch and manage realtime voice agents and chatbots, 22 July 2026
SiliconANGLE — OpenAI introduces Presence to help enterprises build AI agents, 22 July 2026
Help Net Security — OpenAI Presence connects AI agents to enterprise data with built-in guardrails, 22 July 2026