How to govern Gemini
Google's assistant for research, drafting and analysis, and how its access to your data changes the picture.
Google · Reviewed monthly, and when Google announces a capability change · Last reviewed 16 Oct 2026
Governance change Reviewed the release notes from 3 September to 13 October. The Gemini app can now start a coding agent that plans, builds and tests code in the background, and a Customise menu connects more than 40 apps and skills that can act for the person, such as placing orders or making bookings. Skills replace Gems and run automatically on matching prompts. Full changelog ↓How Gemini is used
We see five common ways businesses use Gemini, and we govern each one on its own terms. If your team uses it differently, that is fine: you describe the use in your own words and Certrak works out the governance from what it actually does.
General productivity assistance
Consequence to people: LowDrafting, summarising, brainstorming, internal Q&A - day-to-day help with internal work
Document analysis and review
Consequence to people: LowReviewing contracts, reports, or technical documents
Marketing content creation
Consequence to people: LowDrafting marketing copy, social posts, ads, blog content
Internal data analysis and insights
Consequence to people: LowAnalysing business data, surfacing insights, building dashboards
Code generation and review
Consequence to people: MediumWriting or reviewing code, with a developer in the loop
Governing Gemini in practice
- Name one person who owns Gemini in your business. Governance starts with a name.
- Write down what Gemini is used for. Certrak recognises 5 common uses: General productivity assistance, Document analysis and review, Marketing content creation, Internal data analysis and insights and Code generation and review. Yours may differ; write down yours.
- Decide what Gemini may and may not be given. Internal business information is in scope, so name what stays out.
- Agree that a person reviews every output before it is used, and name who.
- Gemini can run code or scripts without a person approving. Record which of these you allow, and who can change that.
- Look at this again every month, and sooner on any of these: industry incidents, vendor model updates and autonomy level changes.
What changed, and how Certrak responded
We record every check here, including the ones that changed nothing. A check that found no governance change proves we looked.
-
Governance change Scheduled review
Google Antigravity built into the Gemini macOS app
Google shipped it 13 Oct 2026.
Reviewed the release notes from 3 September to 13 October. The Gemini app can now start a coding agent that plans, builds and tests code in the background, and a Customise menu connects more than 40 apps and skills that can act for the person, such as placing orders or making bookings. Skills replace Gems and run automatically on matching prompts.
How Certrak responded: Where Gemini is used for code, it can now write and run code on the person's own machine without each step being reviewed. Owners are asked whether their use includes the built-in coding agent; if it does, the system is treated as running code and the matching controls apply. Connected apps that order or book on a person's behalf are noted for owners to consider.
-
No governance change Scheduled review
Gemini release notes
Google shipped it 28 Aug 2026.
Reviewed the recent release notes against Gemini's use patterns. No change to what it can do without approval, the data it is expected to touch, or who reviews its output.