AI product management · Industry brief

Organizational restructuring around AI is stalling at decision rights. While companies have flattened engineering hierarchies from 66% to 29% traditional pyramid structures and reduced pod sizes to three to five people, 70% still centralize all AI decisions regardless of maturity level, preventing faster code deployment from translating to customer value. According to Bain's 2026 Technology Report, AI tool fluency now ranks as the top capability sought in engineers (62% of respondents), three times higher than coding skill, yet without distributed accountability for agent actions, velocity gains evaporate in approval queues. Enterprise AI adoption has reached 88%, but fewer than one-third see measurable returns. Agentic AI systems—performing multi-step tasks with minimal human intervention—are the fastest-growing category in 2026, concentrated in customer support, IT, and back-office functions where they cut average handle time by 10-30%. However, over half of chief executives report no measurable return on AI spending, with data quality, skills gaps, and unclear ROI ownership cited as top barriers. ISO 42001 and governance frameworks are now shaping vendor selection rather than serving as compliance afterthoughts, per Callhounds Global research. Companies succeeding are running narrow pilots, establishing data and governance standards before scaling, and tracking specific metrics.

OneTrust announced platform and product innovations at TrustWeek 2026 to enable AI governance at enterprise scale. According to OneTrust's 2026 AI-Ready Governance Report, 86% of surveyed organizations experienced an AI-related incident in the past year, yet only 27% slowed or paused deployment. The company introduced CORIE (Contextual Orchestration for Reasoning, Intelligence and Evidence), a shared intelligence layer that automates risk decisions across privacy, consent, technology risk, and AI governance while maintaining auditable records. New capabilities include an AI Control Plane that acts as an independent control layer between AI agents and enterprise systems, a headless MCP Gateway for AI-native integrations with tools like ChatGPT and Claude, AI-driven assessments designed to reduce completion time by 66%, and posture management for regulations including GDPR and EU AI Act compliance. The platform's Governance Command Center provides centralized control across governance programs, enabling organizations to embed governance into agent behavior and apply governance decisions at the point of work rather than post-deployment.

Volvo has revised its supplier Terms and Conditions effective September 30, 2026 to establish new AI compliance obligations for automotive suppliers. The revised terms define generative AI, prohibit suppliers from incorporating AI functionality into products without Volvo's prior written approval, and require disclosure of intended use, functionality, and associated risks. Suppliers may use generative AI internally for design and development activities provided the AI does not become part of the delivered product. Crucially, suppliers must contractually flow down these AI obligations through every level of the supply chain, potentially holding Tier 1 suppliers responsible for breaches by lower-tier suppliers. The terms raise questions about what risk assessments OEMs will require before approving AI-enabled products, and suggest suppliers need governance and documentation processes similar to cybersecurity or data privacy assessments to evaluate AI-related risks, including controls over proprietary information, confidential data, and AI-generated outputs. Source: Butzel law firm client alert.