Increase Productivity.
Govern AI with Confidence.
The only native Mac endpoint solution to see, govern and deploy AI configuration at scale through the management plane you already run.
Shadow AI is already inside your organization.
The moment an employee installs an AI application such as Claude Code, Cursor, or Claude Desktop, AI becomes part of your company’s Mac environment. These tools can deliver real productivity benefits, but they may also operate outside the policies and oversight established by your organization. IT can see the Mac and may know that an application is installed, but often cannot see how the AI is being used, what company information it can access, or which actions it is allowed to perform.
AI applications are also more difficult to manage than traditional business software. They may connect to company systems, access files, use different AI models, and perform tasks on behalf of the user. Many of these activities are not clearly visible through the device-management and security tools organizations already rely on.
The AI applications themselves may include settings that can limit access and reduce risk. However, those settings are often difficult to configure, vary from one application to another, and may change whenever the software is updated. Managing them manually across hundreds or thousands of Macs is simply not practical.
This creates two major areas of concern. Developers using tools such as Claude Code and Cursor may accidentally expose company code, connect to unapproved AI services, or allow AI assistants to take actions without appropriate limits. Other employees may use personal AI accounts to upload confidential documents or connect AI tools to internal business systems without the organization’s knowledge.
In both cases, IT may have limited visibility, no complete record of what occurred, and no reliable way to demonstrate that company policies were enforced. Traditional management and security products were not designed to address both groups through one central solution.
AI Governance: The configuration plane for enterprise AI on Mac
Jamf gives enterprise organizations the only native firstparty solution to see, govern and deploy vendor-correct configuration for AI tools across the Mac fleet, turning ungoverned AI into a defensible, audit-ready posture without adding new infrastructure or disrupting end-user productivity.
AI Governance is built into the platform and deploys the same way every other device policy does: through the management plane, at the OS level, with the audit trail to prove it.
Key capabilities
AI application inventory
Surface every AI tool running across your Mac fleet — what launched it, what it’s connecting to and which tool invocations carry the highest risk, using first-party endpoint data no cross-platform vendor can replicate.
MCP server inventory
See every MCP server running on your fleet, what it exposes and which AI clients are connected, so you know what to govern before you write a single policy rule.
Vendor-aware policy builder
Configure Claude Code, Claude Cowork and OpenAI Codex without editing JSON. Three curated postures — Permissive, Balanced, Strict — validated by Anthropic, ready to deploy in a single session.
Tamper-proof enforcement via MDM
AI policies deploy as Jamf Blueprints and are applied at the OS level, so developers and end users cannot override specific tamper-proof settings.
Vendor control tracking engine
Automatically monitors Anthropic releases and flags new or changed controls within days — policy stays current without a manual review cycle.
Governance report & audit trail
A PDF Executive AI Posture Report ships with every configuration: sanctioned vs. ungoverned breakdown, full audit trail, EU AI Act crosswalk. Board-ready, generated automatically and no additional authoring required
Deploy vendor-correct AI governance through the platform you
already run — no new tools, no new
expertise required.
- Give developers the best AI tools, configured correctly from day one without IT slowing them down.
- Eliminate hand-edited JSON configs. The policy builder tracks every Anthropic release and updates automatically.
- Move from blanket AI blocks to granular, OS-enforced policy,enabling productivity without governance gaps.
- Meet EU AI Act audit trail requirements and SOC 2 obligations automatically, through the management plane you already use to run your Mac fleet.
- Give CISOs and CIOs a board-ready AI posture report, generated automatically with no additional authoring required.
Govern it alongside the experts
Jamf works directly with Anthropic and AWS, so the controls in the policy builder are validated by the people who built the tools and stay current as those tools evolve.
AWS
Through the AWS partnership, Jamf governs both Anthropic and OpenAI from a single management plane, no additional infrastructure or separate vendor integrations required. OpenAI models on Amazon Bedrock launched in limited preview on April 28, 2026.
Anthropic
Anthropic exposes the deepest enterprise control surface in the market. Jamf's direct engineering partnership means curated defaults are validated by the people who built Claude and policy stays current as Anthropic ships new controls.
The state of AI governance in the Apple enterprise
Generative AI adoption is moving faster than the governance frameworks designed to manage it. We surveyed 687 IT and security leaders across the Apple enterprise to understand how organizations are navigating adoption, risk, and what comes next. Read the full research or get the highlights below.
AI tools are already on your fleet. Now govern them.
AI Governance is part of Jamf for Mac. If you’re already a customer, you’re closer to a defensible AI posture than you think.