Apple @ Work is brought to you exclusively by Mosyle, the only Apple unified platform. Mosyle is the only solution that integrates in a single professional-grade platform all the necessary solutions to seamlessly and automatically deploy, manage and protect Apple devices at work. Over 45,000 organizations trust Mosyle to get millions of Apple devices ready effortlessly and affordably. Ask for your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
Most IT teams have a reasonable handle on what AI apps are installed in their Mac environment. Your device management vendor can show you what’s going on; Policies can block which apps shouldn’t be there; and vendors have added AI visibility features in the past year. The app layer is mostly solved, but the browser remains a concern depending on your environment.
About Apple @ Work: Bradley Chambers has been an Apple IT admin since 2009. Through his experience with firewalls, switches, a mobile device management system, enterprise grade WiFi, 1000s of Macs, and 1000s of iPads, Bradley will highlight how Apple IT managers deploy Apple devices, build networks to support them, train users and share their products to improve IT products and Apple’s products from IT. departments.
The app layer is the easy part
When the topic of AI governance comes up, it’s usually about:
- What AI tools are installed?
- Which ones are approved?
- What data can they access?
These are all real questions that IT teams should know, and if they don’t, then that’s a priority. If an employee installs an unapproved AI coding tool or local model inference engine, IT can detect, flag and automatically remove it. That part of the problem is largely within reach for any organization running a managed Mac fleet.
The browser is where the data actually runs
Here’s the bigger problem for most IT teams: an employee opens Safari or Chrome, goes to ChatGPT or Claude, logs into their free personal account and uploads a company document to ask the model a question about it. No app has been installed, and nothing shows up in your app inventory report from your device management vendor. The action happens entirely in a browser, which IT typically has no visibility into at the web application layer, depending on your filter setup.
Jamf addresses this directly with Browser AI Governance coming in Q4 2026. The capability lets administrators identify the use of personal AI accounts in Safari, Chrome, Firefox, Edge and other browsers, and implement policies at the point of action, including blocking actions. I’m very interested to see this in action once it arrives.
The enterprise browser approach
Another answer to the same problem is the enterprise browser, and I think many organizations are looking forward to this. Iceland is the most prominent example in this space that I have seen. The idea is that instead of trying to bolt governance into an existing browser from the outside, which isn’t necessarily native, you give employees a managed browser that IT controls from the ground up. Every use case happens in a container IT governs, including which web AI tools employees can access, whether they can paste company data into a prompt, and what can be downloaded or uploaded.
However, the abortion is there. Asking employees to switch their primary browser is a tougher request than installing a policy through an extension, and on the Mac specifically, Safari is deeply integrated in ways that replacing it as their everyday browser is likely to meet pushback. Chrome runs into the same problem. But the island is growing fast. They recently announced a $400 million Series F round at a $6.4 billion valuation, and I think their model will end up being the standard for many businesses.
Finally, the tools to manage this are either just arriving or still in development; the policy frameworks have not caught up with the coming technical capabilities, and the use cases are changing rapidly.
Graduation
AI governance on the Mac isn’t just about managing which AI apps are installed. It is much more difficult than that. The browser is where corporate data actually moves to personal AI accounts, and it’s the part of the stack that traditional Apple management tools were never designed to manage at the web application layer. I expect this market to evolve a lot in the coming years.
Apple @ Work is brought to you exclusively by Mosyle, the only Apple unified platform. Mosyle is the only solution that integrates in a single professional-grade platform all the necessary solutions to seamlessly and automatically deploy, manage and protect Apple devices at work. Over 45,000 organizations trust Mosyle to get millions of Apple devices ready effortlessly and affordably. Ask for your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
FTC: We use income earning auto affiliate links. More.