Artificial Intelligence
November 3, 2026
MENLO PARK, Calif., Nov. 3, 2026 — Snowflake today at Snowflake Expedition 2026 announced new innovations that put context, security, and governance at the foundation of every AI agent, not bolted on after the fact. Snowflake is interoperable by design, connecting an organization’s entire data estate across catalogs and clouds, providing the universal governance controls and context that agents and analytics depend on. To bring that same governance and context to autonomous agents, Snowflake is bringing new capabilities to Horizon Context, the home for governed business context inside Snowflake Horizon Catalog.
Snowflake’s new Business Ontology allows these agents to operate with a shared, pre-approved understanding of core business definitions to enable reliable answers. While Cortex AI Gateway governs how the agents access models, invoke tools, and take action across enterprise systems. As a result, every decision and operation remains secure, fully auditable, and bound to a single set of policies, on a single data copy, regardless of which cloud, catalog, or engine the data sits in.
Trusted and reliable agents are hard to build. Not because of model limitations, but because enterprise context is inherently fractured. According to a recent MIT Technology Review report sponsored by Snowflake, 55% of executives cite a lack of business context as the primary cause of low-quality AI agent insights, with fragmented or inaccessible data ranking second at 45%.
As these agents spread across the business, connecting to models, MCP servers, and enterprise systems, they’re multiplying faster than IT and security can keep up. Companies are left with an impossible choice between scaling AI quickly while absorbing inaccuracies, vulnerabilities, and runaway costs, and slamming the brakes on the very momentum they are trying to build.
Snowflake eliminates that tradeoff by giving organizations the confidence to move fast without losing control. With shared business context grounded in an organization’s entire data estate, active execution guardrails, and unified policies governed across every cloud and engine, teams no longer have to choose between agent velocity and enterprise security. The agentic enterprise runs on more than data access, it runs on data companies can govern, agents they can control, and answers they can trust.
“For decades, governance gave organizations the confidence to make decisions with correctness, security and compliance. In the agentic era, governance is no different, it promotes trust and accelerates AI adoption,” said Christian Kleinerman, EVP of Product, Snowflake. “The enterprises that win won’t be the ones with the most agents. They’ll be the ones whose agents know exactly what the business means by accessing the right data, abide by governance and guardrails specified, and can account for actions taken by agents. By extending Snowflake Horizon Catalog with Business Ontology and Cortex AI Gateway, context and governance stop being afterthoughts and become the foundation every agent is built on for the agentic enterprise.”
Business Ontology Grounds AI Reasoning in Governed Business Context
A dashboard gives one answer, an analyst gives another, and an AI agent gives a third. People stop knowing which number to trust. Every business definition needs an official version and an accountable owner, whether the number is going to a team meeting or to a regulator. With Snowflake’s interoperable architecture, Business Ontology can define that version once and apply it across an organization’s data inside and outside of Snowflake.
AI agents need three kinds of context to answer reliably, including what a business term officially means, how it is calculated, and the operational knowledge nobody has written down. A Business Ontology governs the official meaning, a Semantic View calculates it, and Cortex Sense infers what isn’t already defined. Together, this unified framework establishes one single, authoritative business context for every agent, app, and person across the enterprise.
Snowflake is introducing Business Ontology as the newest capability within Horizon Context, the home for governed business context inside Horizon Catalog. Business Ontology allows teams to approve official definitions for core concepts like net revenue and link them directly to underlying tables and views, ensuring definitions persist across every tool.
This new capability builds on how Horizon Context collects, enriches, and activates intelligence across the entire data estate. Out of the box connectors collect schemas, query logs, dashboard definitions, and usage signals from sources like Tableau, Power BI, dbt, SQL Server, and PostgreSQL. Horizon Context enriches this metadata with end to end lineage, automated tags, AI descriptions, popularity signals, and Apache Ossie (incubating) open standard Semantic Views, creating the foundational graph that Business Ontology governs.
From there, Snowflake CoCo, the coding agent for data teams, and Snowflake CoWork, the personal work agent for knowledge workers, use these approved business concepts to ground their responses. Powered by Cortex Sense, agents synthesize this governed context alongside real time usage signals, ensuring human approved ontology definitions always take precedence over competing inferences.
Organizations that already keep definitions in a third-party catalog or spreadsheet can migrate them to Snowflake in a single guided CoCo session, which pulls out domains, candidate terms, relationships, and linked data assets and marks everything as a draft for owners to approve. Teams can then maintain these definitions and mappings centrally as their business evolves, giving people and AI agents reusable, governed context without recreating it for each application. Every change is logged, so when an auditor asks what net revenue meant in Q2 and who signed off, the answer is a simple lookup.
Cortex AI Gateway Brings Every Agent Under One Set of Controls
Cortex AI Gateway is the single front door for agents in an organization. As a part of Horizon Catalog, Cortex AI Gateway applies one set of policies to agent connections across clouds, frameworks, and AI providers. Agents take action on enterprise data through MCP servers, and Cortex AI Gateway applies the company’s access policies, authentication, and permissions to those calls. Agents inherit the controls already established for human users, removing the overhead of creating and managing a different set of operations.
Governance has to be in place before agents reach production, not after an incident forces the issue. A single ungoverned connection or unexpected bill is enough to pause an entire AI program. With Cortex AI Gateway, users can:
- Run agent code securely without managing infrastructure: Cortex Sandboxes provides agents a secure, private space to run custom code right alongside company data in Snowflake, automatically following the exact permissions of the person running the agent. While Cortex AI Gateway controls the models and tools an agent can call, Sandboxes controls the code that agent actually executes. These environments launch in seconds with no servers to manage and shut down automatically upon completion, giving organizations complete control over autonomous agent workflows without exposing credentials or moving data off Snowflake.
- Detect agent overreach and insider misuse before it becomes an incident: Cortex AI Gateway’s Agent Abuse Detection analyzes complete agent trajectories, not individual prompts, to catch agents operating beyond their permissions and employees using agents to bypass approvals or exfiltrate sensitive data. A two-stage engine pairs efficient screening with context-aware reasoning, so security teams receive explainable findings instead of alert noise. Snowflake also served as a technical design partner with OpenAI on Private Safety Processing (PSP) which will enrich dangerous agent activity detection analysis with privacy-preserving safety signals from OpenAI and improve its effectiveness.
- Keep a record they own and unlock deeper insights: Observability records what every agent did, from the models it called to the tools it used and the decisions it made, in the customer’s own Snowflake account rather than a vendor’s. Agent Trace Intelligence allows teams to query traces against their business data to find agents wasting money in loops, tools that are failing, and the real cost of each completed task.
- Inherit protections already in place: Cortex Inference runs inference on Snowflake’s infrastructure across a broad and growing set of frontier and open source models, giving teams the right model for each task without separate vendor contracts or dedicated infrastructure. Cortex AI Guardrails applies account-wide runtime protection against prompt injection, jailbreaks, and novel attacks to every agent routed through the gateway, including third-party agents.
- Know what each agent costs, and cap it: Cost governance attributes AI spend to any user, team, department, agent, or app, and enforces hard limits that stop runaway agents before they exceed their budgets. Dynamic Model Routing matches each request to an organization-approved model based on cost, accuracy, and latency, keeping routine work off the most expensive models.
- Check every tool call before it runs: With MCP governance through Cortex AI Gateway Tools, every agent tool call across cloud, Saas & private VPCs is authenticated and validated against fine-grained authorization policies before it executes autonomously or on-behalf-of an user with auditability of tool calls and identity propagation. Unauthorized actions, unapproved API calls, and compliance violations are blocked before an agent touches a sensitive system.
Enterprises including Glean and Kargo are already using Cortex AI Gateway to scale AI agents across their business without losing control of security, compliance, or spend. Partners including Uniphore extend Cortex AI Gateway controls to the agents they orchestrate for joint customers.
With these innovations, Snowflake is raising the bar for what enterprises should expect from an AI agent. Most organizations run their data across multiple platforms, clouds, and environments. Snowflake is interoperable by design, connecting that entire data estate and providing the universal governance capabilities and context that agents and analytics depend on. The data beneath it is governed wherever it lives, across clouds, catalogs, or engines, the definitions behind its answers are ones the business has already approved, and every action it takes is recorded and accounted for. That’s what turns an agent from a pilot into something the business can run on, and it’s the foundation of the agentic enterprise.
In July and August 2026, MIT Technology Review Insights conducted a global survey of 400 chief data and analytics officers, chief information officers, chief technology officers, chief AI officers, and other senior data and technology executives. The survey respondents work in organizations across eight industries. All of their organizations earn $500 million or more in annual revenue, with 36% earning over $10 billion annually.
In addition to the survey, in-depth interviews with senior technology executives offer firsthand insights into how organizations are striving to improve the quality of AI agent insights.
Snowflake is the platform for the AI era, making it easy for enterprises to innovate faster and get more value from data. More than 14,500 customers around the globe, including hundreds of the world’s largest companies, use Snowflake’s AI Data Cloud to build, use and share data, applications and AI. With Snowflake, data and AI are transformative for everyone. Learn more at snowflake.com (NYSE: SNOW).
The Big Data Inside Amazon’s New Fire Phone
The new Fire phone that Amazon launched this week looks like your ordinary black smartphone,…
Three Reasons to be Scared of the Internet of Things
We know the Internet of Things forecasts: 50 billion connected devices by 2020. Apparently, there’s…
Wanted: Intelligent Middleware That Simplifies Big Data Analytics
We’ve seen tremendous technological innovation in the data analytics space over the past 10 years….
GPUs Tackle Massive Data of the Hive Mind
LIVE from GTC12 — The flock of birds that weaves seamlessly through the sky, propelled…
Why Hadoop on IBM Power
In the quest to achieve data-driven insight, Hadoop running on Intel X86-based processors has emerged…
Datanami’s Leverage Big Data Summit Wraps Up
Dialog and networking were on the Datanami agenda this week as we kicked off our…
Who Controls Enterprise AI Agents? Data Platform Vendors Race to Provide the Answer
AI agents are everywhere. Every other news story is related somehow to AI agents. As…
The Token Trap: Why AI Costs Spiral at Scale
Most enterprise AI teams discover the token cost problem somewhere between the demo and production,…
Hugging Face Launches ProtoStar to Tackle Science’s Data Problem
There’s a lot of scientific data out there – and universities, government agencies, and research…
Dataiku Headless Tackles a Growing Problem With AI Coding Agents
Getting an AI coding assistant to write a data pipeline is becoming easier. No surprises…
Oracle’s New Lakehouse Tools Target a Blind Spot in Enterprise AI
Giving AI agents access to company data is one thing. Making sure they understand what…
Europe RAISEs the Stakes for AI in Science
Europe is making progress with its AI for science initiative, dubbed Resource for AI Science…
