Skip to main content

AI in Databases Is Here - But Where's the Governance?

Bharath Vasudevan
Quest Software

Enterprises are racing to leverage AI in their database environments — but most are skipping the guardrails. According to Quest research, 67% of organizations say AI is already critical to their database operations. Yet fewer than half report having a formal governance framework in place to manage it. That mismatch puts businesses at risk — operationally, financially, and reputationally.

Let's be honest: when machines start making decisions that used to require human judgment, we need to know exactly how those decisions are made. Or at least be able to trace them when something breaks.

And AI is making more decisions than ever. In the same research, 77% of organizations say they've added a moderate to extensive number of new databases with AI capabilities. The top use cases? Natural language querying, fraud detection, predictive analytics, and enabling large language models to generate queries or summaries based on enterprise data. This isn't the future. It's already here.

Many modern database platforms are embedding AI not just to enhance analytics, but to automate and optimize core database functions that were previously manual and time-intensive. These include AI-driven indexing, query rewriting, storage management, and performance tuning. AI is also supporting predictive maintenance, automated anomaly detection, and intelligent data classification to improve discovery, compliance, and security.

The Real Risk Isn't the AI - It's the Blind Spot

Here's a fair question: are AI-generated queries really more dangerous than ones written by overworked analysts at 2 a.m.?

Maybe not. But with human-authored queries, we know who wrote what, when, and why. We can assign responsibility. With AI, those lines blur, especially when suggestions are blended invisibly into workflows.

The risk isn't that AI is wildly inaccurate. It's that it's plausible. A wrong answer that looks right is much harder to catch when you don't know it came from a model. And GenAI doesn't raise its hand when it hallucinates. It just runs.

Without labeling, traceability, and human review, there's no way to know if a model just rewrote a query that violates business logic — or returned biased results without context.

Multi-Platform Chaos Is Making It Worse

Most DBAs already manage hybrid environments. According to the same Quest study, 84% support three or more database platforms, spanning private cloud, public cloud, and on-prem systems.

AI doesn't simplify this. It adds a layer of abstraction — making it harder to track what's happening, where, and why. And many teams are already stretched thin: 40% of people managing databases today aren't formally trained DBAs, and only half of "unofficial" DBAs feel confident in their expertise.

In that context, AI-generated automation can be helpful — but it can also amplify problems. If a GenAI tool tunes a query on Platform A, will it break downstream flows on Platform B? If a model interprets schema metadata incorrectly, will anyone notice before it goes live?

The complexity isn't just technical. It's organizational. And that's exactly why governance has to evolve.

DBAs Are Evolving - But They Can't Do It Alone

Let's challenge an assumption: that DBAs should lead AI governance.

We don't think that's realistic. DBAs are critical enablers — but they can't carry the full weight of compliance, oversight, and cross-system validation.

Still, their role is changing: 77% of DBAs now work across security, AI, and compliance teams, according to Quest's data. They're being asked to validate outputs, explain AI behavior, and spot issues before they ripple into production.

It's a shift from "managing databases" to "managing how AI interacts with data." That requires context, curiosity, and collaboration.

And, yes, it raises anxiety. Even among highly skilled DBAs, 61% worry that AI might replace parts of their job. But the reality is simpler: AI isn't replacing the DBA, it's redefining their job.

DBAs now have the chance to shift toward higher-value work, validating AI outputs, applying governance policies, and guiding safe automation. But to do that effectively, they need structure: clear frameworks and tools that support oversight, traceability, and explainability.

Human oversight still matters. In fact, it matters more than ever.

So, What Does Good Governance Actually Look Like?

Before you can govern, you have to see. That's why 90% of organizations now rely on data observability and monitoring tools. These systems don't just flag issues — they help:

  • Speed up root cause analysis
  • Detect anomalies in query behavior
  • Improve collaboration between dev, ops, and data teams
  • Enable less experienced staff to safely handle growing workloads

Observability gives teams insight into what the AI is doing, where it's acting, and whether those actions are aligned with policy. It answers questions like:

What did the AI do?

Was it supposed to?

And what happens next?

But observability is just one piece of a larger governance strategy. Based on our research and field work, here are five areas where organizations can begin strengthening governance for AI in database environments

1. Metadata and Lineage Management: Even basic metadata tracking helps teams trace how AI modifies or accesses data. Mapping lineage can flag risks introduced by automation.

2. Model and Algorithm Transparency: Start small: keep a registry of GenAI tools or embedded logic in use, even if only for internal reference. Over time, build toward documented purpose, inputs, and outputs.

3. AI Auditing and Monitoring: Dashboards and alerts can grow in complexity — but even simple logs of AI activity help surface early warning signs.

4. Human-in-the-Loop Oversight: Not every task needs human review, but critical actions like access control and data classification often do.

5. Policy-Based Controls and Guardrails: Role-based access or explainability thresholds can start as guidelines and evolve into enforceable policies.

Not every organization can implement all five at once but even starting with one or two can materially reduce risk and build toward a sustainable governance model.

Modern tooling is starting to support these practices. While we won't name names here, recent GenAI features in database management software now emphasize explainability, version control, and dual-mode execution (AI with human confirmation). That's a move in the right direction.

Don't Wait for a Breakdown

Here's the uncomfortable truth: AI won't slow down. The real question is whether we'll step up to govern it — or let it govern us.

If we wait until an AI-generated query triggers a compliance breach or a bad recommendation reaches the CEO's desk, it'll be too late. The time to act is now — while adoption is still fresh and workflows are still flexible.

That doesn't mean locking things down or adding red tape. It means asking better questions:

  • Can we trace what AI is doing?
  • Do we have the right people reviewing its outputs?
  • Are we sure the AI is helping us — not quietly making decisions we don't understand?

You can move faster with AI. But you need brakes, too.

Bharath Vasudevan is VP of Product Management at Quest Software

Hot Topics

The Latest

I've spent a lot of time in the channel, and one thing I keep coming back to is this: a partner program is only as good as what it looks like in the field. Many programs look great on paper, but when a partner is in front of a customer navigating a complex hybrid environment or trying to make the case for AI-powered observability, the gap between what a vendor promises and what it actually delivers becomes very clear, very fast ...

Enterprises today operate in a real-time environment where uninterrupted access to trusted data has become a baseline expectation for users, applications and automated systems. Traditional DataOps models, built on manual effort and human triage, cannot keep pace with this always active demand. AI agents are emerging as the operational backbone, ensuring consistent data availability, reinforcing trustworthiness and enabling a level of scale that manual processes cannot achieve ...

For decades, trust in the digital workplace rested on familiar signals. We trusted faces on video calls, voices on the phone, and emails that appeared to come from people we knew. These cues felt human and intuitive. They anchored how decisions were made, approvals were granted, and access was authorized. AI-powered deepfakes have quietly broken that model ...

Cloud migration was supposed to be a one-way door. For most enterprises, it turns out it isn't. Cloud data repatriation is a real and growing trend. A new survey ... finds that 89% of organizations plan to expand their on-premises infrastructure footprint over the next two years — and 75% have already moved at least some workloads back from public cloud in the past 24 months. The findings point to a broad rethinking of where data belongs ...

Over the past few years, large language models (LLMs) have revolutionized the software industry. Given their ability to excel at multi-step reasoning, LLMs have helped enterprises streamline workflows and adapt to the unknown. However, employing such models comes with sky-high costs, latency issues, and limited flexibility. In the realm of IT operations, it is generally wiser to employ smaller, domain-specific models instead ...

For years, DevOps teams operated under a simple assumption: collect enough telemetry, and you can find and fix any problem. That assumption is breaking down. Modern enterprises now operate across microservices, hybrid cloud environments, APIs, Kubernetes, and highly automated delivery pipelines. Releases happen continuously, dependencies shift constantly, and failures spread faster than teams can diagnose them ...

New Relic surveyed IT and engineering leaders from the media and entertainment (M&E) sector to understand what's working — and where challenges persist with their observability practices. The findings reveal how M&E organizations are navigating rising platform complexity, audience expectations, and AI-driven change. Below are five takeaways that stand out ...

Let me start with something I've seen play out more times than I can count. A team hits a wall with the cloud. Costs creep up, then spike. Performance starts to feel inconsistent. Someone in finance asks a simple question like "why did this double?" and nobody has a clean answer ... Maybe this isn't the right place for everything. That realization feels like a breakthrough, like you've identified the problem. In reality, you've just identified the starting line ...

In MEAN TIME TO INSIGHT Episode 24, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses network observability tool sprawl ... 

In cloud-native systems, scaling is often as simple as moving a slider. For on-premise databases, the stakes are different. Over-provisioning hardware is expensive. Under-provisioning leads to performance bottlenecks that are difficult to fix once the equipment is in the rack ...

AI in Databases Is Here - But Where's the Governance?

Bharath Vasudevan
Quest Software

Enterprises are racing to leverage AI in their database environments — but most are skipping the guardrails. According to Quest research, 67% of organizations say AI is already critical to their database operations. Yet fewer than half report having a formal governance framework in place to manage it. That mismatch puts businesses at risk — operationally, financially, and reputationally.

Let's be honest: when machines start making decisions that used to require human judgment, we need to know exactly how those decisions are made. Or at least be able to trace them when something breaks.

And AI is making more decisions than ever. In the same research, 77% of organizations say they've added a moderate to extensive number of new databases with AI capabilities. The top use cases? Natural language querying, fraud detection, predictive analytics, and enabling large language models to generate queries or summaries based on enterprise data. This isn't the future. It's already here.

Many modern database platforms are embedding AI not just to enhance analytics, but to automate and optimize core database functions that were previously manual and time-intensive. These include AI-driven indexing, query rewriting, storage management, and performance tuning. AI is also supporting predictive maintenance, automated anomaly detection, and intelligent data classification to improve discovery, compliance, and security.

The Real Risk Isn't the AI - It's the Blind Spot

Here's a fair question: are AI-generated queries really more dangerous than ones written by overworked analysts at 2 a.m.?

Maybe not. But with human-authored queries, we know who wrote what, when, and why. We can assign responsibility. With AI, those lines blur, especially when suggestions are blended invisibly into workflows.

The risk isn't that AI is wildly inaccurate. It's that it's plausible. A wrong answer that looks right is much harder to catch when you don't know it came from a model. And GenAI doesn't raise its hand when it hallucinates. It just runs.

Without labeling, traceability, and human review, there's no way to know if a model just rewrote a query that violates business logic — or returned biased results without context.

Multi-Platform Chaos Is Making It Worse

Most DBAs already manage hybrid environments. According to the same Quest study, 84% support three or more database platforms, spanning private cloud, public cloud, and on-prem systems.

AI doesn't simplify this. It adds a layer of abstraction — making it harder to track what's happening, where, and why. And many teams are already stretched thin: 40% of people managing databases today aren't formally trained DBAs, and only half of "unofficial" DBAs feel confident in their expertise.

In that context, AI-generated automation can be helpful — but it can also amplify problems. If a GenAI tool tunes a query on Platform A, will it break downstream flows on Platform B? If a model interprets schema metadata incorrectly, will anyone notice before it goes live?

The complexity isn't just technical. It's organizational. And that's exactly why governance has to evolve.

DBAs Are Evolving - But They Can't Do It Alone

Let's challenge an assumption: that DBAs should lead AI governance.

We don't think that's realistic. DBAs are critical enablers — but they can't carry the full weight of compliance, oversight, and cross-system validation.

Still, their role is changing: 77% of DBAs now work across security, AI, and compliance teams, according to Quest's data. They're being asked to validate outputs, explain AI behavior, and spot issues before they ripple into production.

It's a shift from "managing databases" to "managing how AI interacts with data." That requires context, curiosity, and collaboration.

And, yes, it raises anxiety. Even among highly skilled DBAs, 61% worry that AI might replace parts of their job. But the reality is simpler: AI isn't replacing the DBA, it's redefining their job.

DBAs now have the chance to shift toward higher-value work, validating AI outputs, applying governance policies, and guiding safe automation. But to do that effectively, they need structure: clear frameworks and tools that support oversight, traceability, and explainability.

Human oversight still matters. In fact, it matters more than ever.

So, What Does Good Governance Actually Look Like?

Before you can govern, you have to see. That's why 90% of organizations now rely on data observability and monitoring tools. These systems don't just flag issues — they help:

  • Speed up root cause analysis
  • Detect anomalies in query behavior
  • Improve collaboration between dev, ops, and data teams
  • Enable less experienced staff to safely handle growing workloads

Observability gives teams insight into what the AI is doing, where it's acting, and whether those actions are aligned with policy. It answers questions like:

What did the AI do?

Was it supposed to?

And what happens next?

But observability is just one piece of a larger governance strategy. Based on our research and field work, here are five areas where organizations can begin strengthening governance for AI in database environments

1. Metadata and Lineage Management: Even basic metadata tracking helps teams trace how AI modifies or accesses data. Mapping lineage can flag risks introduced by automation.

2. Model and Algorithm Transparency: Start small: keep a registry of GenAI tools or embedded logic in use, even if only for internal reference. Over time, build toward documented purpose, inputs, and outputs.

3. AI Auditing and Monitoring: Dashboards and alerts can grow in complexity — but even simple logs of AI activity help surface early warning signs.

4. Human-in-the-Loop Oversight: Not every task needs human review, but critical actions like access control and data classification often do.

5. Policy-Based Controls and Guardrails: Role-based access or explainability thresholds can start as guidelines and evolve into enforceable policies.

Not every organization can implement all five at once but even starting with one or two can materially reduce risk and build toward a sustainable governance model.

Modern tooling is starting to support these practices. While we won't name names here, recent GenAI features in database management software now emphasize explainability, version control, and dual-mode execution (AI with human confirmation). That's a move in the right direction.

Don't Wait for a Breakdown

Here's the uncomfortable truth: AI won't slow down. The real question is whether we'll step up to govern it — or let it govern us.

If we wait until an AI-generated query triggers a compliance breach or a bad recommendation reaches the CEO's desk, it'll be too late. The time to act is now — while adoption is still fresh and workflows are still flexible.

That doesn't mean locking things down or adding red tape. It means asking better questions:

  • Can we trace what AI is doing?
  • Do we have the right people reviewing its outputs?
  • Are we sure the AI is helping us — not quietly making decisions we don't understand?

You can move faster with AI. But you need brakes, too.

Bharath Vasudevan is VP of Product Management at Quest Software

Hot Topics

The Latest

I've spent a lot of time in the channel, and one thing I keep coming back to is this: a partner program is only as good as what it looks like in the field. Many programs look great on paper, but when a partner is in front of a customer navigating a complex hybrid environment or trying to make the case for AI-powered observability, the gap between what a vendor promises and what it actually delivers becomes very clear, very fast ...

Enterprises today operate in a real-time environment where uninterrupted access to trusted data has become a baseline expectation for users, applications and automated systems. Traditional DataOps models, built on manual effort and human triage, cannot keep pace with this always active demand. AI agents are emerging as the operational backbone, ensuring consistent data availability, reinforcing trustworthiness and enabling a level of scale that manual processes cannot achieve ...

For decades, trust in the digital workplace rested on familiar signals. We trusted faces on video calls, voices on the phone, and emails that appeared to come from people we knew. These cues felt human and intuitive. They anchored how decisions were made, approvals were granted, and access was authorized. AI-powered deepfakes have quietly broken that model ...

Cloud migration was supposed to be a one-way door. For most enterprises, it turns out it isn't. Cloud data repatriation is a real and growing trend. A new survey ... finds that 89% of organizations plan to expand their on-premises infrastructure footprint over the next two years — and 75% have already moved at least some workloads back from public cloud in the past 24 months. The findings point to a broad rethinking of where data belongs ...

Over the past few years, large language models (LLMs) have revolutionized the software industry. Given their ability to excel at multi-step reasoning, LLMs have helped enterprises streamline workflows and adapt to the unknown. However, employing such models comes with sky-high costs, latency issues, and limited flexibility. In the realm of IT operations, it is generally wiser to employ smaller, domain-specific models instead ...

For years, DevOps teams operated under a simple assumption: collect enough telemetry, and you can find and fix any problem. That assumption is breaking down. Modern enterprises now operate across microservices, hybrid cloud environments, APIs, Kubernetes, and highly automated delivery pipelines. Releases happen continuously, dependencies shift constantly, and failures spread faster than teams can diagnose them ...

New Relic surveyed IT and engineering leaders from the media and entertainment (M&E) sector to understand what's working — and where challenges persist with their observability practices. The findings reveal how M&E organizations are navigating rising platform complexity, audience expectations, and AI-driven change. Below are five takeaways that stand out ...

Let me start with something I've seen play out more times than I can count. A team hits a wall with the cloud. Costs creep up, then spike. Performance starts to feel inconsistent. Someone in finance asks a simple question like "why did this double?" and nobody has a clean answer ... Maybe this isn't the right place for everything. That realization feels like a breakthrough, like you've identified the problem. In reality, you've just identified the starting line ...

In MEAN TIME TO INSIGHT Episode 24, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses network observability tool sprawl ... 

In cloud-native systems, scaling is often as simple as moving a slider. For on-premise databases, the stakes are different. Over-provisioning hardware is expensive. Under-provisioning leads to performance bottlenecks that are difficult to fix once the equipment is in the rack ...