An agent inside the consumer product: what that means for your company
OpenAI put a general-purpose agent into ChatGPT last week. It clicks, fills forms and downloads files — on a subscription anyone in your company can buy.
On 17 July 2025 OpenAI introduced ChatGPT agent: a mode in which the model works on its own virtual computer, browsing pages, clicking, filling forms, downloading and manipulating files to complete multi-step tasks from a natural-language instruction. It is available on paid consumer and team tiers.
Agents have been discussed here since Microsoft announced them in October. Every previous instance was something an IT department deployed. This one is a menu item in a subscription somebody in your company may already pay for personally.
Why that distribution matters more than the capability
The December rule — prepare anything, complete nothing irreversible — assumed the company decides what an agent may do. That assumption holds when agents arrive through procurement.
It does not hold when an agent arrives in a consumer subscription. Nobody configured its permissions. Nobody scoped its access. A colleague who wants a supplier comparison done can simply ask it to go and do one, and it will browse, fill in forms and download things, in a session you cannot see.
The three realistic problems
What it types into other people’s forms. An agent completing a task may enter your company details, a customer name or an email address into a site nobody evaluated. That is a disclosure, performed enthusiastically.
What it reads. Every page it visits is untrusted content reaching a system acting on your behalf. This is the 12 May problem with the addition that it can now act on what it reads.
What it agrees to. Accepting terms, creating accounts, clicking confirm. A person doing this knows they are committing to something. An agent doing it does not, and neither do you.
What to say this week
One sentence added to the page: agent modes that browse and act on your behalf are not to be used with company data or on company business without asking first.
Not a ban on the subscription, which would be unenforceable and would push it onto personal devices. A line about the specific mode, and an invitation to come and discuss a use rather than a prohibition on trying.
Then try it yourself on something harmless, so the conversation is informed. The capability is real and will be genuinely useful. It is the unsupervised arrival that deserves the sentence.