AI Governance arrives, freeform workflows, and custom IT Agents

IT everywhere is saying the same thing: “We lost control of AI.” The truth is there was never anywhere to control it from.

AI tools arrived on personal cards, in browser tabs, and inside developer environments faster than any governance process could follow. Nobody has a central record of what existed, who owned it, or what it cost.

This month, we’re changing that.

BetterCloud’s AI Governance gives IT the one thing it’s been asked to deliver, but has never had: a single owned view of the AI tools, keys, APIs, and agents running in the environment, plus what all of it is costing. Alongside it, we shipped deeper Google Workspace management, a new Integration Marketplace, a new workflow builder, custom IT Agents, and a broad interface refresh.

Here’s what’s new.

AI Governance: Discovery

AI Governance is a brand new addition to BetterCloud’s Next Generation Platform and is opening with the discover pillar, a single inventory of every AI entity across the main AI providers on the market.

One table lists API keys, MCP servers, service accounts, projects, cloud agents, and AI assistants across Cursor, Anthropic, OpenAI, and Github Copilot. Every row carries its type, provider, and owner so a key nobody claims shows up as unclaimed rather than invisible. The table can be searched and filtered by entity, provider, owner, access, and type.

Every entity opens into a per-provider drill-down from each provider. An OpenAI API key surfaces its project, the associated user, its creation date, and last use. A Cursor seat shows spend and usage month to date, a request trend, scope status, lines added and accepted, most-used model, and client version. It’s the level of detail you need to act, not a generic summary.

The AI tooling tab answered the finance question on one screen. Total annual and monthly AI spend, provider count, active against provisioned users, and blended cost per user run across the top, with month-over-month and year-over-year movement beside them. A twelve-month trend chart shows how fast AI spend is compounding, and a per-provider table breaks out category, owner, annual spend, status, discovered entities, and seat utilization. Providers without a billing integration can still be tracked via custom upload.

Support for AWS Bedrock, Microsoft Foundry, and Gemini Enterprise is coming next.

Google Workspace Management: Bulk operations at real headcount

The bulk capabilities you love in BetterCloud’s Google Administration module have come to the Next Generation Platform. 

Selecting several rows in the management grid turns on a selection toolbar scoped to that entity type so one change applies across the whole selection. That includes bulk calendar actions (change owners, add or remove collaborators) and bulk delegation management, including removing many delegations at once.

Integration Marketplace for BetterCloud’s Next Generation Platform

The Integration Marketplace is now the single place to install and manage every integration across SaaS and AI, each with the same surface: what it can trigger, what actions it can preform, what data it exposes, and which scopes it holds.

Every integration card opens into a detail view with the full list of ingested data types and available actions, tagged so filters and search actually find what you’re looking for. You can filter the whole catalog by capability (for example, show only providers that support Gmail resources as actions) and search across the entire library.

Integration permissions are more transparent and can now be scoped. Previously in BetterCloud, the platform needed super-admin privileges. In BetterCloud’s Next Generation Platform, you can scope an integration before you install and choose which ones to grant. Customers who don’t need Drive-level control won’t have to hand it over and those that want the deepest coverage can opt in explicitly. As new scopes get added, existing installs will keep working.

The install flow itself is dramatically shorter than in the User Automation module. Provide minimum credentials, click Test connection, and see instantly whether the integration can authenticate with a specific error message if it cannot. Once installed, credentials, scopes, and sync status all live on the same panel, along with uninstall and pause controls. When an integration becomes unhealthy, like credentials expire or a sync starts failing, the status is centralized here rather than buried in a broken connector notice.

The design goal behind all of this is speed. The marketplace was built so that new integrations with full native breadth and depth can ship faster. Six providers are live today with the rest of the SaaS stack landing here soon.

A new freeform workflow builder

The workflow builder in BetterCloud’s next generation platform is a full rewrite. It is a freeform canvas where you can drop an action or a condition anywhere on the graph, connect them however you want, and split into as many parallel paths as the flow needs.

Conditions are no longer tied to a small pre-configured set. Pick any ingested field from any provider, choose an operator, enter the value to evaluate against, and go. 

Need three branches from one condition? Add three paths.

Need an else? Add it.

Previously you would need to nest wait-for-response actions, but conditions themselves now handle the branching and every path can run in parallel with its own output.

Workflows run in seconds instead of minutes. Load, save, and execution latency are near zero (even in workflows with well over a hundred actions). A small on-demand workflow completes start to finish in under seven seconds which changes what it feels like to build and test.

Richer workflow reports show every step of a run with its inputs, outputs, and status inline. When an action fails, you’ll see the full error message the provider’s API returned. 

On demand workflows are live now with more on scheduled and event based triggers coming soon. 

IT Agent Studio and Custom IT Agents

The IT Agent now opens on the IT Agent Studio, a single home for every agent in BetterCloud. You can start a conversation with the default BetterCloud IT Agent or work with the curated agents purpose built for common IT tasks like onboarding, license auditing, and security posture checks. 

More importantly, you can now build your own. Clone one of the pre-build agents or start from scratch. Give it a name, write its system instructions, choose which widgets pin alongside the chat (Google Workspace view, Data Explorer, and more), and decide whether the agent is private to you or shared across your organization. Every customer agent inherits the same tool set, human-in-the-loop approvals, reverse some actions, and audit trail as the default IT Agent.