Introducing AI Governance in Zoho CRM

Introducing AI Governance: Control What Field Data LLMs Can Access in Zoho CRM

When an LLM reads a lead record, it doesn't stop at the name and company alone; it reads every field on that record, including revenue, phone number, and home address, unless told not to. Zoho CRM has introduced AI Governance to answer exactly this question: what should an LLM actually be allowed to read from your records?

What AI Governance Does

For every field in a module, you can now choose whether an internal or external LLM can access the data it holds, and if it can, whether the value should be masked rather than shared in full. Some fields hold data that's perfectly fine for a model to use; others hold sensitive details, such as national ID numbers or revenue figures, that you'd rather keep out of an AI's reach entirely, or let it work around without ever exposing the real value.

How Governance Works

  • Decide which field's data a model can access at all.
  • Apply masking to a chosen field, so its value is shared in a hidden form rather than plain text.
  • Set these controls separately for internal and external LLMs, so a field can be open to Zoho's own model, Zia, while being hidden from an external one you've connected, such as an OpenAI or Anthropic key.

Where to Find It

AI Governance lives in the Fields tab of every module, covering all module types: standard (Org), Custom, and Team modules. Go to Setup, then Modules and Fields, select the relevant module, open the Fields tab, and choose AI Governance.

The Two Controls Per Field

For both the Internal LLM (Zoho's own AI) and the External LLM (a model you've connected), you get two choices per field:

  • Allow to LLM. Share the field's data with that model. Leave it unticked, and the model never sees the field at all.
  • If Allowed, Apply Masking. When a field is allowed, the model receives a masked value in place of the real one, so the true value is never exposed. A masked value looks something like +91 91235***** or serena*****@zohocorp.com.

Use the search box if the field list is long, set the controls to fit your policy, and save. These settings are per module, so they need to be applied separately for each one.

Default Behaviour

Note: Most fields are already set to Allow (ticked) when you first land on the AI Governance tab, so existing AI features continue working without interruption. Turning a field off doesn't break anything; the model simply works without it, so a generated summary, for example, is built from whatever fields remain allowed and leaves the rest out. Changes take effect for any AI actions run after you save the page.

A Worked Example: Keeping Sensitive Identifiers Out of AI Output

Consider a Leads module where records store a national ID (such as a social security number or local equivalent) alongside the usual company, city, and revenue fields. Sales reps use an AI assistant to summarise leads and draft follow-ups, and want those summaries genuinely useful, so most fields should remain readable. The national ID, however, should never appear in a generated summary, and shouldn't be handed to an outside model at all.

With AI Governance, the everyday fields stay allowed, the ID field is unticked entirely for the external model, and for the internal model it's allowed but with masking applied. Reps still get rich, helpful summaries built from the everyday fields; the ID stays masked in output generated by the internal model, and is withheld from the external model entirely, so it never appears in its output either. You get the benefit of AI without handing it data it has no business revealing.

An Important Limitation

AI Governance applies only within the Zoho ecosystem. It governs what Zoho's internal LLM and the external models you connect through CRM directly can access. It does not extend to data leaving CRM through MCP or other public connections to outside services. Those connections are governed by their own separate settings, not by AI Governance, so if you use them, review each connection's own data-access configuration individually rather than assuming this feature already covers them.

Availability

  • Available on Professional, Enterprise, Ultimate, CRM Plus, and Zoho One editions.
  • Currently rolling out to partners in the India data centre only, with a phased rollout to other data centres planned.
Need help? 1 Cloud Consultants can help you configure AI Governance across your Zoho CRM modules, and review your MCP and external connection settings alongside it for genuinely complete data control. Book a discovery call with 1 Cloud Consultants.