> AGPL doesn't cover internal software if you don't expose it outside of the company.

Yes it does. AGPL is set up in a very strange way. The source code offering is a condition of modification. It has to be kept up to date at all times, even on software that can only be accessed internally.