Google connects Gemini to your business software by default, AFAS does not

By Piet Baudoin · 20 September 2026

This week came down to one question: who opens the door to your business software, you or your supplier? Google did it for you, the security researchers moved that exact risk higher on their list, and the Dutch software makers are going the other way.

What does Google turn on by default in Gemini?

On 15 September, Google announced that Gemini in Workspace connects to, among others, “HubSpot, Intuit Mailchimp, Intuit QuickBooks, Monday, and Salesforce.” Below that sits the sentence that matters: “This feature will be ON by default for users with Gemini for Google Workspace access.”

On by default, then. If you work with Google Workspace, anyone with Gemini can reach your customer records and your accounting from their email, until your administrator turns it back off. A question for Monday morning: who is that person at your company, and have they looked at this?

Source: Google Workspace Updates, 15 September 2026

Why does excessive agency now rank third?

The same week, OWASP published its new list of the ten biggest risks in AI applications, weighed against 6,639 incidents. “Excessive agency rose from sixth to third as LLM applications gained more influence over external systems,” writes security firm Aembit on 15 September, which itself sells access control for AI assistants. The Next Web, 16 September: “It is about what it has been handed: the tools, credentials and scopes it can reach once it answers.”

The risk is not the wrong answer but what an assistant is allowed to touch. Who gets access to your email and your client files should be your choice, not a box that was already checked.

Source: Aembit, 15 September 2026 and The Next Web, 16 September 2026

What are the Dutch software makers doing differently?

AFAS, a large Dutch business software maker, is going the other way. Implementation partner Irixs, which itself sells AFAS consulting work, wrote today: “Jonas is not a standalone feature you can freely experiment with. It is a component you have to set up in advance in your AFAS environment” (translated from Dutch). AFAS itself writes that Jonas, its AI feature, is “available at no extra cost,” with a fair-use policy, and that the model “always runs within the European Economic Area (EEA)” (translated from Dutch).

TOPdesk, a Dutch service desk software maker, announced its AI agent Robin on 17 September, arriving in October. In the press release: “Customer data stays within the customer’s region by default and is not used to train external AI models” (translated from Dutch). That is the sentence you want from every supplier, in writing. More on this in what is the agentic economy.

Source: Irixs, 20 September 2026, AFAS Customer Portal, TOPdesk, 17 September 2026 and the TOPdesk press release, 17 September 2026

When do the strict rules for AI that screens job applicants start to apply?

AFAS’s product page also mentions vacancy matching: “With vacancy matching, Jonas automatically compares open vacancies with applicants and employees” (translated from Dutch). Screening job applicants falls under Annex III of the EU AI Act, the high-risk category. The page of the Dutch Data Protection Authority (AP) still lists the start of that oversight as August 2026. The European Commission’s enforcement page says something different: “The rules for high-risk AI systems listed in Annex III to the AI Act apply from 2 December 2027.” Plan for December 2027, and start recording now who screened which applicant and why.

Source: AFAS, AI Act, Annex III, point 4(a), Dutch Data Protection Authority (AP) and European Commission

What does this mean for your business?

Four stories, one movement. Your supplier increasingly decides what your AI assistant can reach, and the security researchers now name that as the biggest risk of all. The makers who get it right leave that choice with you.

That is how we do it. Bombos reads what comes in, looks up the matching data in the software you already have and gets the work ready with the reason attached. No message goes out to a customer and no payment goes out the door until someone from your own business clicks Approve. That is technically enforced and always on. We start with one task, for example a shared inbox, with this promise: after three months, that task is ready every day, without anyone having to think about it. Leave your number and we will call you back.

Where is this heading?

I think this is only the beginning. Today, one supplier opens one door for you. In a year or two, every piece of software you use will have its own assistant, and each of those assistants will want access to the others’ data. A company of twenty people will end up with five or six of them running around, from five or six different makers. None of those makers sees the whole picture.

You will not have to figure that out yourself. Bombos already sits in the middle of everything that comes in and works across all your software, so Bombos also sees which assistant wants access to what. By then, we will handle that for you: we keep track of who can reach what, and you just say yes or no. When a customer’s or a supplier’s assistant reaches out to ask about stock or a delivery time, the answer is already ready, and you close the deal faster than the competitor who first has to go and find out what is available.

Sources

Every source was opened on 20 September 2026 and every quote appears in it word for word.