---
title: "Gateway or App: Where to Enforce AI Rules"
description: "Why the most resilient AI governance programs layer controls at more than one point in the stack. An essay from Acme Perspectives."
canonical: "https://acme-jaret.duckdns.org/perspectives/where-ai-governance-belongs"
site: "Acme"
type: "Article"
published: "2026-10-21"
updated: "2026-10-21"
---

# Gateway or app: which layer should enforce your AI rules? Usually both

Rules enforced only at the gateway have no idea what the app is actually doing. Controls placed only in the application can be bypassed by teams that call models directly. Most enterprises need both.

## What the gateway does best

Central logging, model allow-lists, spend limits and data-loss prevention apply consistently to every call that passes through.

## What the application does best

Applications know who the user is, what they’re allowed to see and what the task is. Permission-aware retrieval and action approvals belong here.

## Frequently asked questions

### Which layer should we start with?

Start where your highest-risk traffic flows today, then add the other layer as usage grows.