AI-dentifying methods to manage Apple Intelligence with Jamf Pro

Apple Intelligence unlocks creativity and productivity across macOS, iPadOS and iOS, but unmanaged use may expose sensitive data and pose compliance risks. In this JNUC 2025 session, Jamf’s Lee Cacioppo and Fanatics’ Matt Jerome demonstrate practical ways to configure, scope and automate Apple Intelligence restrictions in Jamf Pro to protect privacy while preserving the user experience.

Key facts

• Blueprints let admins target and enforce secure configurations, like Apple Intelligence keys by OS version.

• Configuration profiles and extension attributes verify settings and aid in usage reporting.

• Scoping and automation streamline compliance across Mac and mobile fleets.

What was announced?

Jamf Pro now supports full control over Apple Intelligence features introduced in macOS Sequoia and iOS 18.2. Using Blueprints or configuration profiles, admins can enable or disable integrations such as ChatGPT, Genmoji, and Apple Intelligence-enabled writing tools and image generation. The session highlights how Smart Groups and version-specific scoping ensure settings only apply where supported, minimizing deployment errors.

Why it matters

Apple Intelligence relies on Private Cloud Compute (PCC) — Apple’s framework that secures generative requests between the requesting Apple device and PCC, end to end.

From a compliance viewpoint, each feature introduces data-handling paths that IT and Security teams may need to lock down, depending on the unique needs and regulations of their organization and industry, respectively. By enforcing restrictions and monitoring user activity with Jamf Pro’s extension attributes, organizations can mitigate the risk of sensitive data being shared with first- and third-party models, while demonstrating compliance with standards and regulations, such as SOC 2 and HIPAA, for example.

How this helps secure your organization

IT admins can streamline compliance across Apple device fleets by implementing payloads in Jamf Pro, manually setting legacy configuration profiles or automating configuration with blueprints and Declarative Device Management (DDM).

Similarly, security teams tasked with mitigating risks of data leaks can align privacy policies with these new settings to not only enforce — but also gain visibility into — compliance levels surrounding data shared with native LLMs.

Industries embracing AI tools, like education to enhance learning, are able to preserve academic integrity by utilizing these controls to limit the use of generative features during exams or critical thinking exercises.