The News
Markup AI, through its VP of Marketing Holly Enneking, is making the case that enterprise AI governance has a critical blind spot: organizations are investing heavily in controlling who accesses AI and what data enters those systems, while largely ignoring the quality, compliance, and brand integrity of what those systems produce. Enneking argues that input-focused governance frameworks are insufficient as AI-generated content volumes scale beyond the reach of manual review processes.
Analyst Take
The Governance Gap Is Real, and It’s Getting More Expensive to Ignore
Enterprise AI adoption has followed a predictable arc. First, organizations scramble to deploy. Then they retrofit controls around access, data handling, and model selection. What typically comes last is accountability for output quality. That sequencing made some sense when AI-generated content was a trickle. It makes les sense now that many organizations are using AI to generate content at industrial scale across marketing, legal, customer service, and internal communications simultaneously.
Enneking states that most current governance frameworks are fundamentally about access control, not output assurance. A company can have a meticulous policy about which employees can use an LLM, which data can be submitted as context, and which approved vendors are on the shortlist. None of that prevents the system from producing content that misrepresents a product, violates a regulatory requirement, or contradicts brand standards. The inputs were clean. The output was still wrong.
Why AI Governance Spending Is Accelerating
The market is already moving in this direction, and the investment signals are unambiguous. According to ECI Research’s 2026 Application Development: Day 1 survey, 58.2% of respondents selected “Moderate increase (10–25%)” when asked how much they would increase AI governance spending. Only 3.2% said no change. That’s a strong consensus signal: governance is becoming a budget line, not an afterthought. The question organizations haven’t fully answered is what they’re buying with that spending. If the answer is primarily access management and data loss prevention, they’re solving half the problem.
The output-governance gap is most acute in regulated industries, which is a large portion of the enterprise AI market. ECI Research’s 2026 Application Development: Day 1 survey also found that 71.5% of respondents cited industry-specific compliance (FinServ/Healthcare) as a regulatory pressure influencing release engineering. When the same compliance exposure that shapes how software gets shipped starts applying to AI-generated content, the stakes for output quality rise sharply. A financial services firm whose AI-generated client communications contain inaccurate disclosures isn’t just facing a brand problem; it’s facing a regulatory one.
The Accountability Question Nobody Has Answered
There’s a harder issue beneath the output quality problem: who is responsible when approved AI produces content that violates policy? This question doesn’t have a clean answer in most organizations today. Legal says it’s a marketing problem. Marketing says it’s a vendor problem. The vendor says the model behaved as documented. In practice, accountability diffuses across the chain, and that diffusion is itself a compliance risk. Regulators, particularly under frameworks like the EU AI Act, are not sympathetic to distributed accountability. They want a named responsible party.
Markup AI’s positioning targets this by arguing that brand, legal, and accuracy requirements need to be translated into enforceable content standards, not aspirational guidelines. That’s a meaningful distinction. Aspirational guidelines describe what good output looks like. Enforceable standards create a mechanism to prevent bad output from reaching distribution. The technical and organizational work required to get from one to the other is non-trivial, and that’s the market opportunity Markup AI is addressing.
Looking Ahead
AI output governance is going to become a distinct product category with its own evaluation criteria, procurement process, and integration requirements. Over the next 12 to 18 months, expect to see AI governance platforms bifurcate into those focused on model and data governance (the current dominant paradigm) and those focused on output compliance and content assurance. Organizations that have been treating these as a single problem will need to revisit their vendor strategy.
For ITDMs, the immediate action is to audit current governance frameworks against a simple test: do they cover what comes out, or only what goes in? For developers building AI-assisted content pipelines, the architectural implication is that output validation needs to become a pipeline stage, not a post-publication audit. Companies that wait for a high-profile compliance incident to force this investment will pay more and move faster under worse conditions. Getting ahead of it now, while budgets are already moving toward governance, is the lower-risk path.
Stay Ahead of Application Development Trends
Get weekly analyst insights, research notes, event coverage, and AppDevANGLE updates delivered directly to your inbox.
Subscribe for Weekly Insights
Join technology leaders, practitioners, and GTM teams following the trends shaping modern software delivery.
Looking for deeper research access?
Explore ECI Research reports, survey insights, and market analysis through the ECI Research Portal.
