Snowflake Declared Itself the 'Control Plane for the Agentic Enterprise' at Summit 26 — Claude as Foundational AI, Natoma Acquisition, Platform Rebrand
At Summit 26, Snowflake said it wants to be the 'control plane for the agentic enterprise.' It adopted Anthropic's Claude as the foundational AI across Cortex, CoWork, and CoCo, acquired agent-security startup Natoma, and rebranded its entire AI platform.

The data warehouse just declared itself the "control tower of the agent era"
At its annual user conference "Summit 26" in San Francisco on June 2–4, Snowflake made a big declaration: it wants to be the "control plane for the agentic enterprise." Unpacked, that means becoming the control tower that, when countless AI agents run inside a company, governs from the center what data they can touch and what they're allowed to do.
There are three headline announcements. First, Snowflake adopted Anthropic's Claude as the foundational AI across Cortex AI, CoWork, and CoCo — a response to surging demand for governed enterprise AI — and said Snowflake Cortex Code became the fastest-growing product in company history. Second, it acquired agent-security startup Natoma. Third, it rebranded its entire AI platform. A 5-year, $6B AWS compute/AI-infrastructure commitment disclosed just before the conference (May 27) underpins all of it.
Why it matters: it symbolizes data platforms moving from "a place to experiment with AI" toward "production infrastructure that runs agents around the clock." Until now, most enterprise AI sat at the PoC stage. Snowflake aimed squarely at the next step — "agents are actually doing work now, and that needs a plane to control safely." Run the agents where the data lives, and govern those agents. That's the core message.
The players — Snowflake, Anthropic, and the keyword "governance"
Snowflake got big as a cloud data warehouse — pooling a company's vast data in one place and running analytics and queries on top. As the AI era arrived, a proposition rose: "where the data lives is where AI should work." Rather than pulling data out to feed the AI, running AI and agents inside the platform where the data lives is far better for security and governance. Snowflake has chased that seat by growing an AI layer called Cortex AI.
The partner front and center is Anthropic — its Claude becomes the foundational model across Cortex AI, CoWork, and CoCo. For Anthropic, this is a massive enterprise distribution channel: Claude gets installed as the default AI engine inside the many large customers that run Snowflake. That Snowflake even issued an official press release about the Anthropic partnership that same week shows how strategically both companies view it.
The recurring word here is governed AI. The biggest obstacle to enterprises actually using AI in real work is control. If you can't control what data an agent touches, what it does with what authority, and whether it meets regulatory and security requirements, big companies can't put it into production. Snowflake's control-plane vision and the Natoma (agent-security) acquisition all thread through this single word. The pitch is selling not just smart AI, but AI you can trust to do the job.
What's actually in it — three announcements and the infrastructure behind them
First, the Claude foundation. Snowflake adopted Anthropic's Claude as the foundational AI for products like Cortex AI (the AI layer over data), CoWork, and CoCo, against a backdrop of rising demand for governed enterprise AI. An interesting detail: Snowflake Cortex Code became the fastest-growing product in company history — a signal that demand to run code and agents on top of the data platform is exploding.
Second, the Natoma acquisition. Natoma is an agent-security startup. As agents proliferate, controlling "what an agent does with whose authority" becomes the core problem. Just as humans need identity and access management (IAM), agents need identity, permissioning, and access control. Buying Natoma means Snowflake purchased the security piece of its control-plane vision outright. Running smart agents and safely caging those agents are two different problems.
Third, the platform rebrand. Snowflake re-architected the branding of its whole AI lineup. This isn't a mere name change — it's an identity declaration: "we're more than a data warehouse; we're an agentic-enterprise platform." Backing all of it is the 5-year, $6B AWS commitment disclosed on May 27. Running agents continuously demands enormous compute, and Snowflake prepaid that infrastructure with AWS at scale to show it means business. (Note: the AWS deal itself predates the conference, so treat it as timeline context.)
| Announcement | Detail | Significance |
|---|---|---|
| Claude foundation | Anthropic Claude as base AI for Cortex/CoWork/CoCo | Governed enterprise AI |
| Cortex Code | Fastest-growing product in company history | Exploding agent demand on data |
| Natoma acquisition | Absorbed agent-security startup | The security piece of the control plane |
| Platform rebrand | Redefined AI lineup identity | "Data company → agent platform" |
| AWS commitment (5/27) | 5-year $6B compute/AI infra | Large-scale compute for always-on agents |
What each side gets — Snowflake, Anthropic, and enterprise customers
For Snowflake, this is an identity upgrade — from a company that stores and analyzes data to one that runs and controls agents. The data-warehouse market is fiercely competitive with slowing growth, so it's expanding territory into the bigger, stickier "agentic-enterprise platform" market. Since customer data already lives in Snowflake, letting them run agents on top deepens lock-in and makes leaving harder.
For Anthropic, it's a huge enterprise distribution channel — Claude installed as the "default AI" inside the many large and regulated-industry customers that run Snowflake. Without direct selling, Claude rides the Snowflake ecosystem deep into big companies. And for an Anthropic that has positioned governance and safety as strengths, Snowflake's "governed enterprise AI"–seeking customer base is a market where its brand positioning fits perfectly.
For enterprise customers, the biggest hurdle to AI adoption — governance — gets lower. You can run a vetted model (Claude) inside the platform where your data lives, with agent security (Natoma) included. No need to pull data out, and agent permissions can be controlled centrally. It's especially attractive for heavily regulated industries — finance, healthcare, public sector — the very customers who "can't put AI into production without governance."
Echoes from history — data companies trying to become "platforms"
Data and infrastructure companies climbing to become "AI platforms" is the industry-wide current right now. Success and risk coexist.
Parallel — Databricks' path. Snowflake's biggest rival, Databricks, has walked a similar road — stacking an AI/LLM layer on its lakehouse and buying model companies (e.g., MosaicML) to grow an "AI platform" identity. Snowflake's Claude foundation and Natoma acquisition are a move to differentiate in that rivalry via the angle of "AI governance." Both companies share the same proposition — "run AI where the data lives" — and fight over who presents the safer, more integrated platform.
The winning formula — lock-in. The history of cloud and data platforms is the story of companies that got big on lock-in: "once your data is in, it's hard to take out." If Snowflake stacks agents, security, and governance on top of data, the cost of a customer migrating elsewhere grows exponentially. When "data + agents + control" bundle in one place, that becomes the moat. The strategic core of this announcement is exactly that lock-in reinforcement.
The risk — the gap between announcement and real use. Conversely, flashy visions like "control plane" and "agentic enterprise" are only proven when companies actually run agents reliably in production. That's why Futurum framed it as "four infrastructure bets at Summit 26 that determine whether the agentic enterprise delivers." Visions sound great on a conference stage, but if agents don't run trustworthily against real data and real work, you can't escape the "graveyard of PoCs." Announcement flash and operational sturdiness are separate things.
How rivals counter — Databricks, hyperscalers, model companies
Databricks is the head-on competitor, fighting over the same "AI platform on data" market with an open, multi-model strategy and lakehouse architecture. If Snowflake binds tightly to Anthropic via "Claude as foundation," Databricks will likely differentiate on "openness not tied to a specific model." Freedom of model choice vs. integrated governance — a clash of two philosophies.
Hyperscalers — AWS, Google, Microsoft — are in a delicate spot. Snowflake commits $6B to AWS and depends on its infrastructure, yet competes with them for the "control plane" seat, since hyperscalers push their own data/AI/agent platforms (Bedrock, Vertex, Fabric). Snowflake will position itself as a "cloud-neutral data/agent control plane" to win customers who don't want to be locked to a single hyperscaler.
Model companies (OpenAI, Google) should watch the Snowflake–Anthropic alliance warily. If Claude gets installed as the "default AI of the data platform" in the large-enterprise market, that's less room for OpenAI and Gemini. They'll counter via their own enterprise channels (Azure-OpenAI, Vertex) or partnerships with other data platforms. Ultimately, "which data platform binds to which model" is becoming a new front line that decides enterprise-AI share.
So what actually changes — by persona
If you run enterprise data or AI, the key is that "running governed agents where the data lives" became real. If you already use Snowflake, you can trial Claude-based agents in a controllable form without pulling data out. Just don't get swept up by marketing terms like "control plane" — scrutinize concretely how agent permissions and access are actually controlled (and how Natoma integrates).
If you're an AI startup or developer, the macro trend is that "agent security and governance" is the next hot area. A company like Natoma — handling agent identity, permissioning, and access control — getting acquired signals market and money flowing in. As agents multiply, demand for "tools that safely cage agents" explodes too. Finding opportunity around the model (security, observability, governance) rather than in the model itself is a viable strategy.
If you're an investor or industry watcher, Summit 26 is an inflection point where "enterprise AI's center of gravity shifts from experiment to production" — and the key that enables that production is clearly "governance." Watch the alliances forming among data platforms (Snowflake, Databricks), model companies (Anthropic, OpenAI), and hyperscalers (AWS, Google, Microsoft) over "who controls the agents." As much as the race for smarter models, "who holds the control plane" is the battleground of the next round.
References
- Snowflake — Snowflake and Anthropic Accelerate Enterprise AI Adoption (Press Release)
- Snowflake Summit 2026: Four Infrastructure Bets That Determine Whether the Agentic Enterprise Delivers — Futurum
- Snowflake commits $6B to AWS as it pushes deeper into AI — The New Stack
- Snowflake Cortex AI
- Anthropic — Claude for Enterprise
출처
관련 기사

Anthropic Just Toppled OpenAI in Revenue – Here's What That Actually Means

Anthropic Launches Claude Managed Agents — Turning AI Agent Development into Days, Not Months

Anthropic Captures 70%+ of New Enterprise AI Deals vs OpenAI, Per Ramp Data
AI 트렌드를 앞서가세요
매일 아침, 엄선된 AI 뉴스를 받아보세요. 스팸 없음. 언제든 구독 취소.
