SAP and NVIDIA announced today at SAP Sapphire that SAP Business AI Platform now includes NVIDIA OpenShell, an open-source runtime for secure autonomous AI agents, enhancing enterprise security and governance. SAP has integrated NVIDIA OpenShell into its Business AI Platform, allowing for the secure development and deployment of AI agents within enterprise systems. OpenShell provides isolated execution environments, policy enforcement at the filesystem and network layers, and infrastructure-level containment to guard against damage from failed agent logic.
Within SAP Business AI Platform, OpenShell serves as the runtime security layer for all SAP AI agents, including custom agents built in Joule Studio. SAP engineers are collaborating with NVIDIA to codeesign OpenShell, contributing back to the open-source project. The partnership aims to address the trust equation for autonomous agents, which must operate without review at every step and require boundaries, policy enforcement, and an audit trail before production use.
NVIDIA OpenShell asks: Can this agent action safely execute? Joule Studio runtime, the enterprise control layer within SAP Business AI Platform, asks: Should this action happen at all? Together, they close a gap that application-layer security alone cannot.
SAP customers building custom agents will benefit from NVIDIA NemoClaw, a reference blueprint available directly in Joule Studio, providing a structured path to trusted production deployment without needing to engineer security scaffolding from scratch. AI agents will create value only when enterprises can trust them with their data, which is often housed in SAP systems. SAP and NVIDIA are making agents ready to act while staying within required enterprise boundaries.
Source: nvidia
