Mercari Rolls Out Claude Code Company-Wide With Governance to Match
- Mercari rolled out Claude Code and Claude Cowork company-wide in May 2026
- The company argues that not using AI is itself a business risk
- Because the tools can handle local files and OS commands, governance and auditing are central
Mercari argues that choosing not to use AI is itself a business risk, and in May 2026 rolled out Claude Code and Claude Cowork across the company. Handing every employee a tool that can manipulate local files and run operating system commands brings governance problems, and this report examines the mechanisms holding it together.
Most companies get stuck at one of two extremes: ban the tools, so staff quietly use outside services — shadow AI — or open everything and lose control of data and permissions. Mercari took a third path, issuing tools officially while building the permissions and auditing to match, so nobody needs to hide.
Three lessons transfer directly: assume shadow AI already exists, define what the tool may touch before deployment rather than in a policy memo, and make audit logging the default. Watch whether conservative industries follow.