Agentic transformation in UK financial services fails on governance far more often than on technology. The FCA and the PRA have written no separate AI rulebook and have said they do not intend to, so the obligations you already answer to apply to agents in full. They decide which workflows can move to agents at all, and in what order.
Tenhaw designs agentic operating models where the audit trail and the human-in-the-loop points are part of the design rather than a retrofit after an incident. Tenhaw is an AI delivery partner, not a compliance consultancy: the method produces the evidence your second line needs, it does not replace them.
Where agents land first: operational process with high volume and cheaply reversible decisions. The 7regimes that gate it →
Retail, consumer and media organisations see the fastest agentic returns because volume is high, feedback loops are short and decisions are frequently reversible, but they also have the least tolerance for a transformation that takes eighteen months to show results. The regulatory floor is lower than in financial services, and it is not absent. Since 6 April 2025 the CMA has enforced consumer protection law directly under the DMCC Act, which puts anything an agent writes for a customer squarely inside the unfair commercial practices rules, and UK GDPR governs the personalisation data underneath it. Tenhaw has run delivery transformation at Greggs, Sky, Discovery+, YOOX NET-A-PORTER and Colart, and sequences agentic programmes so something is in production inside a peak-trading cycle rather than after it.
Where agents land first: merchandising and demand signals, where decisions are frequent and reversible. The 3regimes that gate it →
Industrial, energy and infrastructure organisations face the inverse of the retail problem: decisions are consequential and expensive to reverse, assets have decade-long lifecycles, and teams are distributed across continents and time zones. The binding constraints here are safety cases and OT security rather than conduct regulation. That means management of change under a functional safety regime, and the boundary between corporate IT and the control domain that the NIS Regulations, NIS2 and IEC 62443 exist to protect. Agentic value concentrates in engineering knowledge work, simulation and planning, not in operational decisioning. Tenhaw built and ran the digital teams behind Anglo American's £40bn hydrogen business case and made global delivery predictable at Yondr across the UK, US and Singapore.
Where agents land first: engineering knowledge retrieval across decades of technical documentation. The 3regimes that gate it →
Agentic delivery in UK government is not gated by a new AI rulebook. It is gated by three published duties that already exist: what an organisation has to record in public about an algorithmic tool, what may be decided about a citizen without meaningful human involvement, and how the work is bought. The AI Playbook for the UK Government sits over the top of those, and departments now run their own digital assurance rather than passing through a central Cabinet Office control.
Tenhaw has not delivered an agentic system inside a government department. What we hold is delivery-transformation exposure to public sector programmes through a supplier, not agentic delivery to a department: at Tecknuovo we built a centralised portfolio office from nothing and ran it across 19 projects, including engagements delivering to HMRC, the MOD and Thames Water. If you need a supplier who has already taken an agentic system through a department's assurance, say so on the call and we will tell you that we are not it yet.
Where agents land first: internal knowledge retrieval across policy, guidance and procedure that is already published. The 6regimes that gate it →