Today, Jamf announced the upcoming release of its AI Governance technology, a new capability within Jamf Pro designed to give IT and security teams visibility and control over Gen AI tools running on their managed Macs. The new feature functions as a native, macOS-level control that aims to bridge the IT gap between rapid employee adoption of AI technology and organizational security requirements.

Managing AI on macOS

AI tools often run natively on Apple Silicon and operate as background processes. This means existing network proxies and cross-platform endpoint tools cannot fully see or govern them. According to Gartner research, spending on AI governance is expected to reach $492 million this year and surpass $1 billion by 2030, indicating that AI governance is quickly becoming an operational requirement rather than a future planning exercise.

“AI adoption across the enterprise is moving faster than existing technology policies can keep up,” said Beth Tschida, CEO at Jamf. “Organizations need governance that matches the way AI tools actually operate on Mac. This means visibility into what’s running, policy controls enforced directly on the endpoint, and reporting that helps security teams demonstrate compliance. Our AI Governance capability delivers that natively from the same platform customers already trust to manage and secure Apple devices.”

Gartner also mentioned that IT leaders need to identify both approved and unapproved AI agents, enforce robust controls for each, and develop incident response playbooks to address potential risks. Without native visibility at the operating system level, enterprise IT departments are left guessing what data is leaving their managed Macs.

How Jamf AI Governance works

The goal of these new features is to provide organizations with an integrated way to translate governance intent into vendor correct configuration profiles. It unifies mobile device management authority with deep tool coverage, keeping policies up to date even as tools change.

• Deep tool discovery: This gives IT teams complete visibility into which AI applications, local models, and developer tools are actually running across the Mac fleet.
• Granular policy controls: Administrators can enforce rules across model access, network permissions, file system controls, and Model Context Protocol server restrictions.
• Vendor control tracking engine: This utility continuously monitors supported AI platforms for new or updated controls, automatically keeping corporate governance policies up to date.
• Audit-ready reporting: IT and compliance teams can quickly generate detailed logs and reports showing compliance with internal AI security standards.

At launch, Jamf AI Governance will include native support for Claude Code, Claude Desktop, and OpenAI Codex. The capability will be generally available on June 30th for organizations utilizing Jamf Pro to manage macOS.

9to5Mac’s take

Because many modern AI tools run directly on Apple Silicon as native background processes, standard network firewall tools can miss their activities. Jamf’s use of its deep operating system-level access to build a native control plane is a great win for its customers.

Instead of completely blocking employees from using tools like Claude or OpenAI developer extensions, IT managers can now monitor and sandbox the data access. This aims to provide the visibility and auditing capabilities required to let teams use next-generation tools without compromising company data on corporate Macs.