Amex GBT: the RiskMandate X-ray

a company · prepared · sources read on 2026-11-07 · the deck · how this X-ray was made · X-ray another name

With JavaScript, the graph of this X-ray and a player for each use case's simulation are drawn here. Everything they show is written out below.

What it does

American Express Global Business Travel (Amex GBT) describes itself as a software and services company for travel, expense, and meetings and events; its products include Egencia, Neo and Complete (built with SAP Concur), and it was taken private by Long Lake, which calls itself an AI holding company, in a $6.3 billion deal completed on 29 September 2026. Its stated AI strategy has three parts: revolutionise the customer experience, power the agentic transformation of B2B travel, and reduce operating costs. In July 2026 it launched an agent-to-agent (A2A) layer that routes traveler requests to specialised agents, with the Egencia AI connector in Claude as its first deployment. s9s1s3s11s12s10s2

Its AI agents

Egencia AI in Claude

A connector that lets a traveler, or an enterprise AI agent, ask Claude to review their calendar, draft itineraries and complete air and hotel bookings within company policy, with Claude acting on the traveler's behalf using their credentials. Announced 27 July 2026 for Egencia customers in Q3 2026. s2s14s17

What it can do:

A2A orchestration layer

The proprietary agent-to-agent 'thinking layer': it interprets traveler requests, breaks them into tasks and routes each to specialised agents (flights, hotels, trip management), within each company's configured policies, traveler profiles and corporate agreements. Amex GBT says it is live in Egencia AI and across its servicing and booking products. s2s14s10s18

What it can do:

Egencia AI chat

Conversational booking in collaboration tools: Egencia AI in Google Chat books and manages trips in one natural-language conversation with the option to reach a travel counselor (early adopters August 2026); a Neo assistant is in pilot in Microsoft Teams. The earnings remarks describe Egencia AI as searching, booking and changing travel while adhering to company policy. s2s10s14

What it can do:

Egencia virtual agent

An LLM-based chat agent, first introduced in 2020 and moved to LLMs in 2025, trained on help-centre content; it answers in ten languages, handles self-service such as password resets and adding a frequent flyer number, finds invoices and itineraries, and transfers to a live travel counselor when it cannot finish. s6s5s4s7

What it can do:

Hotel Lobby

A multi-agent system inside Amex GBT's hotel sourcing consulting service, launched October 2026, with specialised agents for coverage, negotiation and sourcing that automate data cleansing, wish (target) rate calculation and RFP validation; consultants keep strategy, negotiations and exceptions. s16s15s18s19

What it can do:

Use cases: reach, mandate and gap

For each use case: what the agent can technically reach (from the sources), what a deployer would plausibly authorise (the mandate: illustrative, our judgement), the gap between the two (authority nobody accepted), and the controls that publicly stand in the way.

Booking business trips from Claude

The agent: Egencia AI in Claude · who uses it: Business travelers at Egencia customer companies, and enterprise AI agents acting for them, using Claude with the Egencia AI connector.

ReachKindSources
The traveler's calendar for the coming monthdatas2s17
The traveler's credentials: Claude acts on the traveler's behalfsystems2
End-to-end air and hotel bookings: transactions, not only retrievalmoneys2s14
Company configured policies, traveler profiles and corporate agreementsdatas2s14
Amex GBT marketplace inventory of airlines and hotelsoutsides10s2
Transaction data fed into reporting systemsdatas14
Mandate (illustrative)
Illustrative: read calendar entries that imply business travel, to propose trips.
Illustrative: book air and hotel only within the company's configured policy, and only trips the traveler has confirmed.
Illustrative: no changes to the traveler's profile or account settings.
Gap: reach beyond the mandateFrom the reach
The connector acts with the traveler's credentials, so what it can do is whatever the traveler can do, while the request was only to help book confirmed trips.The traveler's credentials: Claude acts on the traveler's behalf; End-to-end air and hotel bookings: transactions, not only retrieval
Calendar access is the whole calendar, while the task needs only the entries that imply travel.The traveler's calendar for the coming month
Controls that publicly stand in the waySources
Bookings operate within each company's configured policies, traveler profiles and corporate agreementss2s14
A live travel counselor is always available to travelers if the AI does not deliver what they needs10

The simulation, each action placed against the mandate (RiskMandate is never in the request path: read-only by design: it places, it does not stop):

  1. Traveler asks Claude to review next month's calendar and draft itineraries (person, reaches The traveler's calendar for the coming month): inside the mandate
  2. Reads every calendar entry, including ones with no travel in them (illustrative) (agent, reaches The traveler's calendar for the coming month): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows the whole calendar as reachable data and a mandate that covers only entries implying travel; the read of the rest sits outside it.
  3. A2A layer splits the request into flight and hotel tasks and routes them to specialised agents (agent, reaches Amex GBT marketplace inventory of airlines and hotels): inside the mandate
  4. Checks options against company policy and the traveler profile (agent, reaches Company configured policies, traveler profiles and corporate agreements): inside the mandate
  5. Books air and hotel for a meeting the traveler marked tentative, not confirmed (illustrative) (agent, reaches End-to-end air and hotel bookings: transactions, not only retrieval): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows a completed transaction on the traveler's credentials for a trip the mandate did not cover, and that the policy check passed because the booking was in policy, not because it was confirmed.
  6. Using the traveler's credentials, updates a loyalty number in the traveler's profile to fit the booking (illustrative) (agent, reaches The traveler's credentials: Claude acts on the traveler's behalf): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows that the credentials the connector holds reach the traveler's profile as well as booking, and that this change was outside the mandate.
  7. Transaction data flows into the company's reporting (agent, reaches Transaction data fed into reporting systems): inside the mandate

Servicing chat with handoff to counselors

The agent: Egencia virtual agent · who uses it: Business travelers using Egencia and Amex GBT chat, and the travel counselors who take over conversations.

ReachKindSources
Help-centre content the virtual agent is trained ondatas6
Traveler account actions: password resets, adding frequent flyer numberssystems6
Traveler invoices and itinerariesdatas5
Live travel counselors who join or take over the conversationpeoples5s4
Changing booked travel through Egencia AImoneys10
Mandate (illustrative)
Illustrative: answer common questions from help-centre content.
Illustrative: account self-service and invoice lookup only for the signed-in traveler.
Illustrative: changes to booked travel go to a counselor or are confirmed by the traveler.
Gap: reach beyond the mandateFrom the reach
Account changes and invoice retrieval happen in chat; how the agent ties each request to the signed-in traveler is not publicly documented.Traveler account actions: password resets, adding frequent flyer numbers; Traveler invoices and itineraries
Egencia AI can change travel, so a servicing chat reaches money as well as answers.Changing booked travel through Egencia AI
Controls that publicly stand in the waySources
If the AI cannot complete a request it transfers automatically to a live travel counselor, who continues the conversations5
Travelers can speak to a counselor at any time, regardless of their requests4
The chat AI is available only in countries serviced in Englishs4

The simulation, each action placed against the mandate (RiskMandate is never in the request path: read-only by design: it places, it does not stop):

  1. Traveler opens Chat in the mobile app and asks how to add a frequent flyer number (person, reaches Help-centre content the virtual agent is trained on): inside the mandate
  2. Adds the frequent flyer number to the account (agent, reaches Traveler account actions: password resets, adding frequent flyer numbers): inside the mandate
  3. Retrieves an invoice for a trip the traveler asks about (agent, reaches Traveler invoices and itineraries): inside the mandate
  4. Changes the return flight on the traveler's request without a confirmation step (illustrative) (agent, reaches Changing booked travel through Egencia AI): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows a change to booked travel made in a servicing chat, and a mandate that routes such changes to a counselor or a confirmation.
  5. Cannot complete a fare question and transfers to a travel counselor (agent, reaches Live travel counselors who join or take over the conversation): inside the mandate
  6. Counselor continues the conversation with the details already gathered (person, reaches Live travel counselors who join or take over the conversation): inside the mandate

Hotel sourcing with Hotel Lobby

The agent: Hotel Lobby · who uses it: Amex GBT Consulting clients and enterprise travel programs worldwide, with Amex GBT hotel-sourcing consultants.

ReachKindSources
Client hotel sourcing data, cleansed by the agentsdatas16s15
Negotiated-rate benchmarks across thousands of properties and supplier performance from more than $5 billion of managed hotel spenddatas16s18
Compliance trends across Amex GBT's client portfoliodatas16s18
Wish (target) rates that set the negotiating positionmoneys16s19
RFPs to hotels, validated by the agentsoutsides16s15
Mandate (illustrative)
Illustrative: prepare and validate one client's sourcing data and RFPs.
Consultants keep responsibility for strategy, negotiations and exceptions (publicly stated).
Gap: reach beyond the mandateFrom the reach
Agents working for one client draw on benchmarks and compliance trends from across Amex GBT's whole client portfolio.Negotiated-rate benchmarks across thousands of properties and supplier performance from more than $5 billion of managed hotel spend; Compliance trends across Amex GBT's client portfolio
Wish rates the agents calculate set the starting point of a negotiation the consultant owns.Wish (target) rates that set the negotiating position
Controls that publicly stand in the waySources
AI agents do the data work; experienced consultants retain responsibility for strategy, negotiations and exceptionss18s19
Built on the same principles of trusted data, governance and transparency as the A2A architectures18s15

The simulation, each action placed against the mandate (RiskMandate is never in the request path: read-only by design: it places, it does not stop):

  1. Cleanses the client's hotel booking data (agent, reaches Client hotel sourcing data, cleansed by the agents): inside the mandate
  2. Compares the client's hotels against portfolio-wide negotiated-rate benchmarks (agent, reaches Negotiated-rate benchmarks across thousands of properties and supplier performance from more than $5 billion of managed hotel spend): inside the mandate
  3. Pulls another client's compliance pattern at a shared hotel into this client's sourcing notes (illustrative) (agent, reaches Compliance trends across Amex GBT's client portfolio): outside the mandate: in the gap. What RiskMandate's record shows: RiskMandate's record shows one client's portfolio data reaching another client's sourcing work, outside a mandate scoped to one client.
  4. Calculates wish rates (agent, reaches Wish (target) rates that set the negotiating position): inside the mandate
  5. Validates the RFPs (agent, reaches RFPs to hotels, validated by the agents): inside the mandate
  6. Consultant reviews the wish rates and leads the negotiation (person, reaches Wish (target) rates that set the negotiating position): inside the mandate

The run

The search agents that looked for leads on 2026-11-07T21:16:43.165Z, for a total cost of $0.0568. What a model says is a lead, not a fact.

AgentModelTimeCitationsLeads
Perplexity searchperplexity/sonar10.1 s1517
OpenAI searchopenai/gpt-5.4-nano:online12.9 s411
Gemini searchgoogle/gemini-3.1-flash-lite:online2.0 s14
OpenRouter web searchanthropic/claude-haiku-5.522.9 s1020

Leads: what the models claimed, and what we found

ModelClaimStatusSource
perplexityAmex GBT provides business travel software and services (booking, servicing, payments, expense, support) and its AI work focuses on agentic servicing with escalation to human counselors.confirmeds9
perplexityThe Egencia AI connector in Claude lets travelers and enterprise AI agents search, book and manage policy-compliant air and hotel travel inside Claude.confirmeds2
perplexityAmex GBT's agent-to-agent orchestration layer interprets requests, breaks them into tasks and routes each to specialised agents.confirmeds2
perplexityAn AI chatbot gives instant responses and brings in a travel consultant when more help is needed.confirmeds4
perplexityComplete by SAP Concur and Amex GBT has an integrated chat with automated hand-off to a live travel counselor, with SAP Joule to follow.confirmeds13
perplexityHotel Lobby is an agentic AI capability for hotel sourcing that cleanses data, calculates target rates and validates RFPs.confirmeds15
perplexityUse case: policy-compliant booking inside an enterprise AI (Claude), reaching air and hotel inventory and policy logic.confirmeds2
perplexityUse case: conversational servicing with escalation to live counselors.confirmeds4
perplexityUse case: hotel program sourcing for program managers, reaching booking data, RFPs and target rates.confirmeds15
perplexityUse case: booking, servicing, payments and expensing in Complete, with live counselor support.confirmeds13
perplexityAmex GBT's CTO said agent-to-agent dynamics change the risk profile and need controls (PhocusWire, 27 October 2026).unverified
perplexityAmex GBT says its AI deployments follow trusted data, governance and transparency principles.confirmeds15
perplexityComplete is a booking, servicing and expensing solution that is flexible, powered by AI and seamless.confirmeds3
perplexityAmex GBT's AI chatbot works alongside professional travel counselors.confirmeds8
perplexityEgencia Chat handled 470,000 conversations in 2024.confirmeds7
perplexityAI accelerates value creation by improving customer experience, powering agentic transformation of B2B travel and reducing operating costs.confirmeds9
perplexityAmex GBT's agentic travel assistant can search, book and manage travel in a single conversation (Travel Weekly).confirmeds2
openaiAmex GBT is building AI agents across servicing and booking that resolve service needs and orchestrate booking within policy, with emphasis on governance and trusted data.confirmeds10
openaiAn Egencia AI virtual assistant gives instant responses and connects the user to a travel counselor when needed.confirmeds5
openaiThe A2A framework gives agents access to data, inventory, workflows and orchestration, including approvals, payments, invoices, expenses and reconciliation.confirmeds10
openaiHotel Lobby uses agentic AI to automate data cleansing, wish rates and RFP validation.confirmeds16
openaiUse case: traveler servicing by virtual assistant with escalation to counselors.confirmeds5
openaiUse case: policy-governed transaction workflows reaching inventory, approvals, payments and finance processes.confirmeds10
openaiUse case: hotel sourcing consulting workflow automation.confirmeds16
openaiAmex GBT describes a 'Select Servicing Suite' with 'Agentic AI | Voice | Chat | Mobile | Desktop'.unverified
openaiAmex GBT is architecting an agent-to-agent framework for agents that need data, inventory, workflows and orchestration authority to book, approve, pay, invoice, expense and reconcile.confirmeds10
openaiAn AI assistant in traveler support responds instantly and connects users with a travel counselor when applicable.confirmeds5
openaiHotel Lobby automates data cleansing, wish rate calculation and RFP validation.confirmeds16
geminiAmex GBT uses AI agents and automation to streamline booking, servicing and policy compliance for corporate clients.confirmeds10
geminiAn AI virtual assistant accesses traveler profiles, interacts with GDSs, processes changes and cancellations and applies policy.not-founds1
geminiUse case: automated servicing reaching booking platforms, policy databases, inventory and financial transaction processing systems.not-founds1
geminiAmex GBT integrates AI to scale servicing and reduce manual intervention.confirmeds10
openrouterAmex GBT is a travel management company adding agentic AI to booking, servicing and hotel sourcing, with an A2A layer reachable from Claude and Google Chat.confirmeds2
openrouterThe Egencia AI connector in Claude reviews the calendar, proposes itineraries and books air and hotel within policy.confirmeds2
openrouterHotel Lobby is a multi-agent system that automates data preparation, wish rates and RFP checks while consultants keep strategy and negotiation.confirmeds16
openrouterAn Egencia LLM virtual agent answers in ten languages and handles password resets and frequent flyer numbers before escalating to consultants.confirmeds6
openrouterUse case: corporate travelers booking inside Claude, reaching calendar data, air and hotel booking and policy rules.confirmeds17
openrouterUse case: hotel sourcing with Hotel Lobby, reaching benchmarks, client spend and compliance data and RFPs.confirmeds18
openrouterUse case: travel assistant in Google Chat and Microsoft Teams; the Teams pilot is for Neo customers.confirmeds2
openrouterAn Amex GBT executive said agent-to-agent interactions change the travel risk profile and need governance (PhocusWire).unverified
openrouterAmex GBT invested in information security and identity and privileged access management controls to govern its AI ecosystem (PhocusWire).unverified
openrouterPress noted the Claude connector's consequential transactions test whether automated booking can be trusted at corporate scale (xoomar.com).not-found
openrouterThe Egencia AI connector in Claude launched 27 July 2026; early adopters August 2026, general availability by end of 2026.confirmeds2
openrouterThe Claude connector is the first deployment of Amex GBT's proprietary A2A architecture.confirmeds17
openrouterHotel Lobby launched in October 2026 and is available worldwide to Amex GBT Consulting clients and enterprise programs.confirmeds19
openrouterThe A2A architecture is already live across servicing and booking products, and Hotel Lobby follows the same governance and transparency principles.confirmeds18
openrouterThe sourcing methodology delivers 28.8% average savings off Best Available Rate and a 96% response rate across 80,000+ hotels a year.confirmeds18
openrouterIn May 2025 Amex GBT launched an LLM virtual agent for Egencia and natural language query for Egencia Analytics Studio; nearly a third of trial users self-served.confirmeds6
openrouterAmex GBT's clients include Citi, Synovus and other financial institutions, businesses and government agencies.confirmeds17
openrouterAmex GBT was taken private after a US$6.3bn acquisition by an AI-focused holding company.confirmeds11
openrouterForrester research commissioned by Amex GBT: 3% describe travel as fully orchestrated; 92% of IT decision-makers expect AI to make travel continuously optimised.confirmeds19
openrouterAmex GBT will deliver machine learning, LLM and natural-language chat in Complete by SAP Concur and Amex GBT.confirmeds2

The questions we would ask

We have not asked them yet.

  1. When the Egencia AI connector acts with a traveler's credentials, what can those credentials reach beyond booking, and can a company restrict the connector to search only or require a confirm step before purchase?
  2. In the A2A layer, is there a record per action of which specialised agent did what, on whose authority, that a customer can export for audit?
  3. How does the chat agent tie a password reset, loyalty change or invoice request to the signed-in traveler?
  4. In Hotel Lobby, how is benchmark and compliance data from other clients separated from the client being sourced?
  5. Under Long Lake, will client travel data be used to improve the Nexus platform shared across Long Lake companies?

Sources

  1. s1 Corporate Travel Management Solutions | Amex GBT, Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/
  2. s2 Amex GBT launches business travel agent-to-agent infrastructure, debuts Egencia AI connector in Claude (27 July 2026), Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/press-releases/amex-gbt-launches-business-travel-agent-to-agent-infrastructure-debuts-egencia-ai-connector-in-claude/
  3. s3 Business Travel Solutions | American Express Global Business Travel, Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/business-travel-solutions/
  4. s4 24/7 chat assistance, Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/why-amex-gbt/chat-assistance/
  5. s5 Traveler Support | Amex GBT, Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/traveler-support/
  6. s6 American Express Global Business Travel Introduces New AI-Powered Solutions (28 May 2025), Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/press-releases/american-express-global-business-travel-introduces-new-ai-powered-solutions/
  7. s7 What makes Amex GBT Egencia's support unrivaled (16 June 2025), Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/ca/resources/blog/unrivaled-customer-support-for-better-business-travel/
  8. s8 Hotel program management: 6 ways to improve booking and spend (22 October 2026), Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/resources/blog/hotel-program-management-with-ai-powered-marketplace/
  9. s9 American Express Global Business Travel Reports Strong Fourth Quarter and Full-Year 2025 Financial Results (9 March 2026), Amex GBT Investor Relations (filing, read 2026-11-07)
    https://investors.amexglobalbusinesstravel.com/investors/news/news-details/2026/American-Express-Global-Business-Travel-Reports-Strong-Fourth-Quarter-and-Full-Year-2025-Financial-Results/default.aspx
  10. s10 Q4 and Full-Year 2025 Earnings Conference Call: prepared remarks (9 March 2026), Amex GBT Investor Relations (filing, read 2026-11-07)
    https://s201.q4cdn.com/264815268/files/doc_financials/2025/q4/Amex-GBT-Q4-2025-Earnings-Call-Prepared-Remarks.pdf
  11. s11 Long Lake, the World's First AI Holding Company, Completes $6.3 Billion Acquisition of American Express Global Business Travel (29 September 2026), Amex GBT Investor Relations (filing, read 2026-11-07)
    https://investors.amexglobalbusinesstravel.com/investors/news/news-details/2026/Long-Lake-the-Worlds-First-AI-Holding-Company-Completes-6-3-Billion-Acquisition-of-American-Express-Global-Business-Travel/default.aspx
  12. s12 Long Lake completes its acquisition of Amex GBT: What customers and partners need to know (29 September 2026), Amex GBT (own-site, read 2026-11-07)
    https://www.amexglobalbusinesstravel.com/resources/blog/long-lake-amex-gbt-acquisition-faq/
  13. s13 Building the Future of Travel & Expense: New Innovations from the SAP Concur and Amex GBT Alliance (17 March 2026), SAP Concur (other, read 2026-11-07)
    https://www.concur.com/blog/article/building-future-travel-expense-new-innovations-from-sap-concur-and-amex-gbt-alliance
  14. s14 Amex GBT launches AI-powered business travel booking through Claude integration (28 July 2026), ETTravelWorld (press, read 2026-11-07)
    https://travel.economictimes.indiatimes.com/news/tourism/corporate/amex-gbt-launches-ai-powered-business-travel-booking-through-claude-integration/132678369
  15. s15 Amex GBT launches agentic AI tool to accelerate hotel sourcing (19 October 2026), ETTravelWorld (press, read 2026-11-07)
    https://travel.economictimes.indiatimes.com/news/technology/amex-gbt-launches-agentic-ai-tool-to-accelerate-hotel-sourcing/135026172
  16. s16 Amex GBT Launches Hotel Lobby, Agentic AI for Hotel Sourcing (15 October 2026), Business Travel Executive (press, read 2026-11-07)
    https://www.businesstravelexecutive.com/news/amex-gbt-launches-hotel-lobby-agentic-ai-for-hotel-sourcing/
  17. s17 Amex GBT adds agentic commerce to corporate travel (7 August 2026), American Banker (press, read 2026-11-07)
    https://www.americanbanker.com/payments/news/amex-gbt-adds-agentic-commerce-to-corporate-travel
  18. s18 Amex GBT launches agentic AI tool to accelerate hotel sourcing, improve corporate travel programme savings (19 October 2026), TravTalk (press, read 2026-11-07)
    https://travtalkindia.com/amex-gbt-launches-agentic-ai-tool-to-accelerate-hotel-sourcing-improve-corporate-travel-programme-savings/
  19. s19 Amex GBT launches agentic AI tool to speed up hotel sourcing (15 October 2026), Travel Weekly (Australia) (press, read 2026-11-07)
    https://www.travelweekly.com.au/amex-gbt-launches-agentic-ai-tool-to-speed-up-hotel-sourcing/

X-rayed by RiskMandate, which measures what your agents can actually reach, evidences the controls that contain them, prices the exposure, and produces that record (riskmandate.ai/llms.txt). The mandates are illustrative. Built by xray@web-summit.dinis from data/xray/amex-gbt/xray.json.

For an agent: this page is https://web-summit.sgit.ai/xray/amex-gbt/index.html (markdown: https://web-summit.sgit.ai/xray/amex-gbt/index.md). Site index for agents: https://web-summit.sgit.ai/llms.txt. Source: https://github.com/SGit-AI/SGit-AI__Website__Web-Summit (release branch dev). Identity of the agent that runs this site: https://web-summit.sgit.ai/agent/index.html.