Jamf unveils AI governance tools for Apple devices

Jamf has unveiled new AI governance, automation and programming tools for managing Apple devices in the workplace, extending its platform across Mac, iPhone and iPad fleets.

The updates include controls for monitoring AI tools on managed Macs, new APIs and Terraform support for infrastructure teams, and automated workflows for software deployment, diagnostics and device health. Jamf also outlined browser-based AI oversight, mobile AI controls, and new support for frontline and bring-your-own-device use cases.

At the centre of the announcement is an expanded AI Governance product line, which Jamf introduced earlier this year. Organisations can now discover AI tools running across managed Macs, apply rules on their use, and generate reports for internal oversight and regulatory reviews.

Several other AI governance features are due later, including deeper investigation tools that trace flagged activity to a device, user and command line. Jamf also plans to add estimates of AI usage and cost by user, device, tool, model and provider, based on token consumption and published pricing, without capturing prompts or responses.

Another planned addition would extend those controls into web browsers, allowing employers to identify use of personal AI accounts and apply restrictions when workers attempt actions such as uploading company files through browser-based AI services.

Jamf is also extending its platform to support on-device AI workloads on Apple hardware, with administrators able to deploy local models and inference engines through Blueprints. A separate mobile AI governance feature is intended to detect, monitor and block AI use in native apps and browsers on mobile devices.

"IT teams are managing more endpoints and more complexity than ever, and now that includes the AI tools running on those same devices," said Beth Tschida, Chief Executive Officer at Jamf.

"We want Jamf to handle more of that routine work automatically, saving admins time while giving them real visibility into what AI is actually doing across that fleet. That's the idea behind everything we're building because AI runs better on Apple, and Apple runs better on Jamf," Tschida said.

Programmable platform

Beyond AI oversight, Jamf is widening access to its platform for developers and infrastructure teams. A new Platform API Gateway gives users one place to manage access across Jamf APIs, including Blueprints APIs, the Compliance Benchmark API and Device APIs.

These interfaces are designed to let customers and partners create, update and deploy Blueprints, check compliance against defined benchmarks, and manage device data through software rather than manual configuration. Jamf has also launched a Terraform provider, allowing teams to manage the platform through code with version control and rollback processes.

Jamf is also moving Routines to a Jamf-hosted automation engine. The change is intended to provide more visibility into automations, access to more than 1,500 integrations, and greater control over where data is held.

Routine tasks

Jamf is adding more automation to day-to-day endpoint management. Through Blueprints, administrators will be able to select from a catalogue of Mac applications and have Jamf install them and keep them updated automatically.

Self Service+ is set to gain a diagnostics feature that lets employees ask questions about device problems and receive explanations and suggested fixes that they can approve themselves. Jamf is also preparing a device health tool that assesses indicators such as memory use, battery condition and crashes to flag Macs that may need attention.

For software rollouts, Jamf plans to add Automated Ring Deployments, letting organisations test updates with a pilot group, pause wider deployment if issues appear, and then expand the release after approval. It is also preparing an Apple-native data loss prevention feature that discovers sensitive data, tracks its movement across the operating system and applies policy controls.

Mobile features

On mobile devices, Jamf has introduced Jamf Device Checker, which gives frontline workers a way to confirm whether a device is ready for use and to resolve issues directly. App Insights is also being expanded with a broader app library and AI-related visibility, showing which apps use AI locally or through cloud services.

For shift-based workforces, Jamf is developing Jamf Tap, which uses RFID or NFC employee badges to assign a device and sign workers into their applications automatically. BYOD support for iOS and Android is also now available, allowing IT teams to separate personal and work data and remove only the work profile when an employee leaves.

Jamf said it now supports more than 35 million devices across more than 78,000 organisations.