Snowflake expands CoCo AI governance: quotas, access controls, tool approval

Snowflake's expansion of CoCo governance reflects a shift in how enterprises approach AI assistants: moving from sandboxing or limiting access to defining clear, enforceable boundaries that let builders operate more freely. The July announcement established three pillars—cost governance, enterprise context, and workplace integration—and today's release operationalizes the first pillar (quotas, now live) while introducing structural controls around access and behavior (coming soon).

The architecture is layered: per-user quotas handle spend; organization-wide policies (MDM), agent profiles, and restricted session scope handle data access and permissions; and Tools by Cortex AI Gateway governs external tool calls. Each control maps to a specific security question an administrator or reviewer might ask. By enforcing these boundaries before a session starts rather than monitoring after the fact, Snowflake positions governance as a prerequisite, not a reaction. This design also reduces friction for builders: approved MCP servers appear automatically, role-based profiles pre-configure the agent, and developers no longer need to manually configure server URLs or manage credentials per service. The result is that governance operates invisibly in the normal case, surfacing only when a user approaches a boundary that would have required approval regardless.