SECAI Core · phase 6 of 15
Sanctioned AI
AI tools and workflows that have been vetted and approved by an organization and meet security and privacy requirements
The Explain card
- Plain English
- Sanctioned AI covers the AI tools and workflows an organisation has vetted and approved, confirming they meet its security and privacy requirements before anyone uses them for work.
- Example
- The company approves one enterprise chat assistant after reviewing data retention terms, enabling single sign-on, turning off training on customer data, and documenting acceptable use. Staff are pointed to it instead of whichever free tool they found.
- Why it matters
- Sanctioned tools give defenders visibility: known data flows, logs, contracts and controls. Offering a good approved option is the most effective way to shrink the unsanctioned alternative.
- Hook
- Sanctioned AI is the tool with a badge; it got through the door because someone checked it.
Where it sits in the deck
Phase 6: Model Quality, Ethics, and Responsible AI Principles
Before deploying a model, understand the quality and ethical dimensions — bias, fairness, explainability, and the human oversight needed to govern outputs responsibly.
