The CX AI market is starting to grow up, and this week made that hard to ignore.
For the past year, vendors have competed on visible intelligence. Better copilots, stronger reasoning, faster demos, and louder claims about what AI will soon be able to do. But the more revealing question is now less glamorous. What happens when AI gets close enough to live enterprise systems to use customer data, take action, and create risk?
That is where last week’s stories become more interesting than they first appear. HubSpot’s rapid reversal on data enrichment, Microsoft’s general availability of Sales Agent and Service Agent, the latest debate around frontier models versus smaller CX-fit models, and even the emergence of the first fully autonomous AI ransomware campaign all land on the same issue.
The next stage of competition is all about whether AI can be trusted to operate.
HubSpot Exposed A New Commercial Risk In AI-Era CRM
HubSpot’s failed enrichment policy is easy to describe as a communications error. That would miss the more important signal.
The company updated its terms so enrichment data could be shared across customer accounts, with opt-out set as the default. The backlash was immediate because customers did not interpret it as a simple feature change. They interpreted it as a change in the commercial meaning of their CRM data.
That reaction matters. In the AI era, customer data is no longer just a system asset. It is a competitive asset, a trust asset, and increasingly a training asset. The moment a vendor looks as if it may blur those boundaries, customers will react accordingly.
Responding to the backlash, Duncan Lennox, Chief Product and Technology Officer at HubSpot, wrote:
“We made a mistake. Nothing matters more to us than the trust of our customers, and with our recent terms of service update we let you down.”
The speed of the reversal is the real tell. HubSpot did not just face criticism. It discovered that AI-era data strategy is now exposed to direct commercial scrutiny. Vendors cannot assume that a better enrichment outcome will justify a looser trust model. For CRM providers, that is a meaningful shift.
Microsoft Is Pushing AI Into The Action Layer
If HubSpot showed the limits of trust, Microsoft showed why the issue is becoming urgent.
Its Sales Agent and Service Agent are now generally available across Microsoft 365 Copilot and Dynamics 365, grounded in live CRM data and embedded inside the tools where sellers and service teams already work. That changes the importance of the launch.
This is a move into the action layer of enterprise software. When an agent can summarize an account, capture follow-up, update fields, recommend next actions, and help coordinate work across Outlook, Teams, and Dynamics, the AI is no longer sitting at the edge of the process. It is participating in the process.
Microsoft framed the move around productivity and context. But the more important implication is architectural. Once AI can act inside workflows, workflow access becomes strategic power.
A service copilot that drafts text is useful. A service agent that can work across customer context, case state, and business data is more consequential. It also carries a much higher burden of permissioning, auditability, and operational discipline.