AI adoption in the enterprise is growing rapidly, and expanding beyond engineering users.
In the last three months, token usage by enterprise companies on AI Gateway has quadrupled, and OpenAI recently reported that from August 2025 to June 2026, non-developer Codex users grew 189x.
Our customers call these builders citizen developers. They know their part of the business better than anyone else, and with AI they can create the software they need to ship work faster and deliver better customer experiences.
Building has never been easier, but that also means that control and governance have never been harder. Employees are using AI tools whether they are approved or not, and if a citizen developer vibe codes a login page incorrectly, private data can reach the public internet.
Enterprise leaders have to figure out how to let everyone build, without giving up security or control.
We built Enterprise Apps and Agents to solve these challenges at Vercel, and in June, we made it available to our customers. Enterprise Apps and Agents is a central control plane for governing every builder, app, agent, token, and dollar.
Today, we are expanding the platform:
Bring Your Own Cloud (BYOC) on AWS is generally available, giving you the full Vercel developer experience, while keeping compute and data inside your AWS boundary.
Enterprise-Managed Authorization through Vercel Connect is launching in public beta, giving agents the ability to access connected services on behalf of employees through your IdP.
Enterprise Apps and Agents gives you a single deployment destination for both engineers and citizen developers, with central governance over access, providers, models, data retention, token budgets, integrations, and policies, managed through your existing IdP.
Vercel centralizes AI governance so that company policies can be applied consistently across control domains.
| Control domain | Vercel controls |
|---|---|
| **Deployment governance** | [Enterprise Managed Users](https://vercel.com/docs/security/enterprise-managed-users) and[RBAC](https://vercel.com/docs/rbac) |
| Access governance | Vercel Passport ,Deployment Protection , andVercel Firewall | | Integration and data governance | Vercel Connect andEnterprise-Managed Authorization | | Model and token governance | AI Gateway , includingUS-only inference andbudget controls |
Apps and agents run on the same infrastructure that powers billions of production deployments, and Vercel gives you a single place for observability and security monitoring across every project, through analytics, audit logs, and the Security Dashboard.
Secure Compute provides private connectivity to enterprise systems, while BYOC on AWS lets your application functions run in your own AWS account under your permissions and network controls.
Citizen developers and engineers use different tools. A marketer might use ChatGPT to build a landing page, an analyst might use Claude Code to run queries and build a report, and an engineer might use Codex, OpenCode, or fx.
No matter the harness, Vercel gives you a single deployment target, and connects to your existing IdP, so you can control who creates deployments.
Before Vercel, shipping a simple internal app at Klaviyo took two weeks of chasing IT, opening tickets for engineering, and following up with the platform team. They built an internal app-building platform on top of Enterprise Apps and Agents, and now anyone in the company can deploy an idea in three minutes. In their first two weeks on Vercel, 512 employees deployed 356 apps.
Controlling who can deploy doesn't protect the apps, agents, and data that make it into production.
On Vercel, you can configure every deployment to be private by default, and with Vercel Passport, you can require employees to authenticate through your IdP before they can access internal apps.
Agents are only useful when they can access your systems and data, but that often means using long-standing environment varibles with wide-ranging permissions to your CRM, databases, Slack, and other systems.
Vercel Connect implements connectors with scoped access, and mints tokens for each agent task, meaning agents only access the specific context they need for the job. And now, with Enterprise-Managed Authorization, when employees sign into Vercel through your IdP, agents can use connected services automatically, without a separate authorization prompt.
Connect also integrates with Passport, so individual employee permissions also apply at the integration and data layer. If someone can't see data in a source system, they can't access it through an app or agent either.
The average enterprise company using Vercel AI Gateway routes across 17 different models. Without a model router, that would require integrating with multiple separate providers, spreading API keys and budget management across platforms.
AI Gateway gives you access to hundreds of models through a single API, with no markup on cost, and Zero Data Retention keeps your data from being stored or trained on. You can also elect to route through US-only providers to maintain compliance.
Mercor connects AI labs with subject-matter experts who help train and evaluate models. Their engineers need access to hundreds of models to enable that work, but before migrating to Vercel, access was spread across direct integrations and third-party routers, making stolen credentials a huge risk, and token spend impossible to manage.
They moved their model routing to AI Gateway, and now engineers can access hundreds of models with a single, expiring secret, and they can set budgets per person or project.
In their first 10 days on AI Gateway, they processed 63 billion tokens without hitting any rate limits.
Vercel Observability gives you a single view for app and agent telemetry across every project, so you can easily manage performance and troubleshoot problems for both internal tools and customer-facing products.
The Security Dashboard flags risks across your team and apps, including missing MFA, unprotected preview deployments, long-lived credentials, and framework vulnerabilities. Each finding links to the settings needed to fix it.
BYOC on AWS is generally available. With BYOC, application functions execute in your AWS account, within your security and network boundaries.
Meta Superintelligence Labs runs on Vercel via BYOC, giving its AI teams the ability to test and deploy ideas quickly, inside their own AWS environment. Leaders at Meta said that in their first week on Vercel, they shipped a month worth of work.
Vercel let's everyone in your company build safely, and makes it easy for engineers to ship the best ideas at global scale, all on a single platform.
That is how we built Vertex, our customer support agent. We were previously using a vendor, but it couldn't answer all of our customers questions. When our support team built agents and skills to cover the gaps and increase our responses times, and we realized they had laid the foundation for the experience we wanted to deliver directly to our customers.
Our GTM engineering team took that foundation and made it production ready with evals and model failover.
Today, Vertex handles 91% of our customer support cases autonomously, processing thousands of tickets a week, and it runs on the same platform where the idea started.
Contact sales to learn more about enterprise governance on Vercel and get a custom demo of the platform.
Learn more about Enterprise Apps and Agents Learn how to protect internal apps with Vercel Passport and your identity provider
Read the complete guide to [Bring Your Own Cloud on AWS](https://vercel.com/kb/guide/byoc)
Deploy a secure data analyst agent [in one click](https://vercel.com/templates/eve/eve-data-analyst)