The Monetary Authority of Singapore and industry partners have published a paper on safeguards for agents in finance. Its SAFR framework proposes checks at the point of action: what is the agent authorised to do, what must be tested before execution and what record must be kept? It is a proposal from Singapore, not a Swiss rule.
In leasing, the distinction is practical. A document agent may read files and draft a request for missing evidence. It has no reason to access payments. A KYC agent may highlight contradictions. It should not independently approve a customer.
Each agent therefore needs a defined mandate: purpose, data sources, permitted actions, limits, an accountable owner and a way to stop it. Critical actions should be checked against that mandate at the time they are attempted.
Technical ability does not confer business authority.
Which action in your process would you explicitly refuse to delegate to an agent?