Snowflake expands CoCo AI governance: quotas, access controls, tool policies now available

Snowflake's expansion of CoCo governance reflects a shift in how enterprise AI platforms balance access with control. In July, the company had outlined three pillars—governing costs, grounding AI in enterprise context, and bringing AI into existing workflows—but cost management alone was insufficient for security reviews. The new layers address distinct pain points: per-user quotas make spend bounded and enforceable, Managed settings ensure policy consistency across three different interfaces (Snowsight, CLI, Desktop), Restricted Session Scope limits the data an agent can touch based on active roles, and Cortex AI Gateway (built on technology from Snowflake's Natoma acquisition) makes external tool access auditable and pre-approved.

The architecture is notable because each control operates at a different scope—query level, team level, organization level—and enforcement happens before a session starts rather than after the fact. This means administrators can answer specific security questions with concrete evidence: what did the user spend, what data could they reach, what external systems did they touch. For builders, the appeal is that governance becomes automatic and role-based; a developer opening a session inherits the right model, skills, and tool access without manual configuration, making the control layer invisible in normal use. The result is intended to expand access beyond sandboxes and manual approval workflows by making it easier for security teams to approve production environments.