Enterprise IT teams now have their first native tool to see, control, and audit AI applications running on Mac devices. Jamf announced general availability of AI Governance, a new capability that enables IT and security teams to discover which AI tools employees are actively using, enforce policy controls, and generate compliance reports. The platform launches with immediate support for Claude Code, Claude Desktop, and OpenAI Codex.

Why Are Companies Struggling to Govern AI Tools?

The problem is straightforward but urgent: AI applications run natively on Apple Silicon and operate as background processes that traditional network proxies and cloud-based monitoring tools cannot fully see or control. Many organizations struggle to confidently audit and report on AI tool usage across their device fleets, including both sanctioned applications and unsanctioned or prohibited tools. This visibility gap has become a compliance and security headache as AI adoption accelerates across enterprises.

The urgency is real. Gartner reports that spending on AI governance is expected to reach $492 million in 2026 and surpass $1 billion by 2030. Additionally, organizations with deeply integrated AI are 40% more likely to report a security incident than those still in the exploration phase, suggesting AI governance is quickly becoming an operational requirement rather than a future planning exercise.

What Does Jamf's AI Governance Actually Do?

Jamf AI Governance provides three core capabilities designed to work natively within macOS without requiring additional agents or separate point solutions. The platform detects shadow AI (unauthorized AI tools), applies vendor-specific configurations, and generates audit-ready reports. All policies are deployed offline and before a user's first login to an AI agent, creating a tamper-resistant baseline.

• Visibility: AI application visibility and shadow AI discovery surface AI tools, agents, and language model runtimes across the fleet, including command-line developer tools and background agents, using Jamf's existing telemetry agent with native macOS frameworks.
• Control: AI access policy controls let IT define sanctioned tools, deploy access policy at scale, and scope different postures to different teams, with vendor-correct configurations applied automatically.
• Governance: An executive AI posture report provides CIOs and CISOs with a snapshot of AI usage, offers Security Information and Event Management (SIEM) compatibility, and assists companies in reporting against existing compliance frameworks.

The platform includes deep governance coverage across model access, tenancy, network permissions, file system controls, MCP (Model Context Protocol) server restrictions, and other vendor-specific AI configurations. A vendor control tracking engine continuously monitors supported AI platforms for new or updated controls, helping organizations keep governance policies current as AI tools rapidly evolve.

How to Implement AI Governance on Your Mac Fleet

• Deploy policies before first login: Set foundational governance controls offline and before users access AI agents, ensuring a day-zero security baseline that cannot be tampered with by end users.
• Scope policies by team: Define different AI access postures for different departments or teams, allowing developers to use approved tools while restricting access in other areas.
• Monitor vendor updates: Leverage Jamf's vendor control tracking engine to automatically stay informed of new controls and configurations as Claude Code, Claude Desktop, OpenAI Codex, and other platforms evolve.
• Generate compliance reports: Use executive AI posture reports to demonstrate governance to auditors and regulators, with built-in SIEM compatibility for integration with existing security infrastructure.

According to Sam Lalli, Security Engineering and SOC Manager at Eventbrite, the speed of deployment matters. "What impressed us about Jamf's AI Governance was how quickly we could apply policy across our Mac fleet without adding another point solution or creating friction for developers," Lalli stated. "Having this critical capability built into the same device management platform we already use really simplifies AI governance for our team".

"AI adoption across the enterprise is moving faster than existing technology policies can keep up. Organizations need governance that matches the way AI tools actually operate on Mac. This means visibility into what's running, policy controls enforced directly on the endpoint, and reporting that helps security teams demonstrate compliance," said Beth Tschida, CEO at Jamf.

Beth Tschida, CEO at Jamf

What's Driving This Shift in Enterprise AI Governance?

The timing reflects a broader industry shift. As AI coding tools evolve from novelty to necessity, enterprises are discovering that traditional device management and network security tools were never designed to govern AI applications. Gartner's Top Cybersecurity Trends for 2026 report emphasizes that "cybersecurity leaders must identify both sanctioned and unsanctioned AI agents, enforce robust controls for each and develop incident response playbooks to address potential risks".

Jamf will showcase this capability at its Jamf Nation events in Sydney, Kuala Lumpur, and Hong Kong in August 2026. The company manages and secures over 35 million devices across more than 78,000 organizations in 100 countries, positioning it as a critical infrastructure layer for enterprises managing Apple devices at scale.

The emergence of native AI governance tools reflects a maturation moment for enterprise AI adoption. As organizations move beyond experimentation and into production deployment of AI coding agents and other AI-powered tools, the ability to see, control, and audit these applications has shifted from a nice-to-have to a business-critical requirement.