MCP lets an AI agent call your tools and read your data through one standard interface. Securing it is an identity, gateway and logging job on the data platform, not a patch cycle.
AI
NIST AI RMF: A Mid-Market Control Map on the Lakehouse
A subcategory-level map from the NIST AI RMF and its Generative AI Profile to concrete lakehouse controls a 400-person company can run, with the evidence each control produces.
Databricks Unity AI Gateway: Governing Models, Agents and MCP
Unity AI Gateway is the Databricks AI gateway for models, agents and MCP servers. Here is what governed means in practice, and which parts are GA and which are still Beta.
OWASP Top 10 for Agentic Applications, Mapped to Enterprise Data
The OWASP Top 10 for Agentic Applications names ten agent risks. Each one maps to a concrete control in identity, data access, orchestration or audit logging, and most of those controls live in the data layer.
ChatGPT Agent Mode at Work: What Company Data It Can Reach
ChatGPT agent mode acts through connectors and a browser within the user’s own permissions. Here is what it can reach at work, which admin controls matter, and how to hand it governed data instead of raw systems.
Shadow AI: Controlling What ChatGPT, Copilot and Meta Muse Can Read
AI agents inherit the access of the person using them, so shadow AI is really an oversharing and inventory problem. Here is the control stack that fixes it without banning the tools.
An AI Governance Framework for Mid-Market Teams, Built on Unity Catalog
A practical AI governance framework a mid-market team can run on Unity Catalog and the lakehouse, mapped to the NIST AI RMF functions and to the evidence several new rules ask for.
RAG on Databricks: AI Search, Formerly Vector Search, Done Right
Databricks renamed Vector Search to AI Search. Here is how its indexes, endpoints and sync modes work for RAG on the lakehouse, and how to tell if you are ready.
Agent Bricks: Building Production AI Agents on the Lakehouse
Agent Bricks turns governed lakehouse data into evaluated, deployable agents. Here is how it works, what its status really is, and how to ship one.









