“Estonia’s decision to assign digital identification numbers to AI agents is setting a precedent on how we must audit what agents can do on behalf of an individual,” says Pointner. “With AI assistants having the ability to open accounts, book travel, and make purchases on behalf of a human user, the traditional parameters of identity verification and compliance frameworks like KYC (Know Your Customer) are disrupted.  

“Digital identity systems are evolving beyond simply verifying the identity of a human user. We are moving toward an era of ‘Know Your Agent’ where traditional KYC processes must adapt to verify an AI assistant has the appropriate permissions and authority to act on that person’s behalf. Estonia’s initiative recognizes that digital trust requires identity systems that can distinguish between human identity and agent authority. By creating these auditable permissions for agents, security and user control can be preserved, which will become a foundational requirement if agentic AI is going to operate safely at scale. 

“The next step in identifying agents and securing them will be interoperability. The broader digital ecosystem will need common standards and protocols that recognize digital IDs across nations and allow agents, businesses, and digital identity systems to securely exchange proof of identity and authorization across platforms.”