Apple 10-K names AI agents a business risk: write yours

Apple's 10-K AI agents risk factor is new this year. The fiscal 2026 annual report, filed November 3, says AI agents "may behave in unintended or unpredictable ways, including by taking actions that were not directed, instructed or authorized." CNBC flagged the language the same afternoon. Apple does not ship an autonomous agent yet. It is still telling shareholders agents could cost it lawsuits and reputation. That is the clearest statement we have seen from a trillion-dollar company about what you are deploying in your shop.

What actually happened

The risk factor is one paragraph, and the verbs do the work. Per CNBC's quotes from the filing, agents "can take actions autonomously, including interacting with internal or external systems that in some cases they may not be authorized to access, executing or altering code, sending communications, and completing transactions." Then the line that matters for anyone using a third-party agent: "The Company's ability to oversee and control third-party artificial intelligence agents and other technologies may be limited."

Apple added a second paragraph about "ethical concerns and negative consumer perceptions related to automation, artificial intelligence and super intelligence," and warned that AI regulation is changing in ways that could be costly.

Context from the week: Apple opened Siri to every app through App Intents on November 2. CEO John Ternus told investors on the earnings call that agentic tools are "promising," but "we just want to make sure that users are aware of what they are giving access to." In October Apple tightened full disk access on macOS for the same reason. The 10-K is the legal version of those remarks.

Why it matters for your business

A risk factor is a company writing down what it fears before it happens. Apple's list is a good one: unauthorized system access, code changes, outbound messages, completed transactions, and limited control over agents it did not build. Every one of those applies to a five-person business running a support agent, a bookkeeping agent and a coding agent.

Most small businesses have none of this in writing. We would start with three documents:

• An agent register. Every agent, what it can read, what it can write, what it can spend, and who approved it.
• Vendor terms. If a vendor's agent can send email or move money on your behalf, your contract should say who is liable when it does the wrong thing. Apple is telling you its own control "may be limited." Assume your vendor's is worse.
• A kill path. Who can shut an agent off, how fast, and what happens to in-flight actions. The Binance breach last week is what no kill path looks like.

None of this requires a lawyer to start. It requires writing down what the agent is allowed to do before it does something else.

Sources: Apple Form 10-K, fiscal year ended September 26, 2026 (SEC), CNBC.