Free public control tool
AI governance inventory
Create an accountable inventory of AI use cases, data, owners, risks, and human oversight.
Use this inventory to document AI-enabled workflows and decide what follow-up they need. It does not test model performance, certify compliance, or assess live systems.
Template / checklist for operators. Not legal advice. Not a certification.
Use when
A team is introducing, renewing, or materially changing an AI-assisted workflow, vendor, or model.
Output
A use-case inventory with risk owners, decision records, and review triggers.
Operator checklist
Work through the prompts and retain the evidence references.
Section 1
Use case and ownership
Describe the workflow in terms a business owner can approve.
- 1
Name the AI use case, intended users, and business outcome.
Evidence to retain: Use-case statement and product or process owner
- 2
Identify the accountable business owner, technical owner, and risk or compliance reviewer.
Evidence to retain: Responsibility assignment and approval path
- 3
Record whether AI output informs, recommends, or makes a decision.
Evidence to retain: Workflow diagram and user-facing process description
Section 2
Data, model, and supplier
Capture the dependencies needed to review the workflow responsibly.
- 1
List input data categories, source systems, and data-handling restrictions.
Evidence to retain: Data-flow map and classification
- 2
Record the model, provider, version or configuration, and connected tools.
Evidence to retain: Architecture record, vendor documentation, and change log
- 3
Identify whether outputs are retained, shared, or used to train any system.
Evidence to retain: Provider terms, retention settings, and internal policy
Section 3
Risk and oversight
Define safeguards before relying on the output.
- 1
Document foreseeable error, bias, privacy, security, and misuse risks.
Evidence to retain: Risk assessment or testing plan
- 2
Specify human review, override, escalation, and prohibited-use boundaries.
Evidence to retain: Operating procedure and training materials
- 3
Set monitoring, incident response, and material-change review triggers.
Evidence to retain: Review cadence, issue path, and change-management record
Want a second set of eyes on the workflow?
Bring one completed worksheet or checklist. Ironframe can help map the handoffs, evidence, ownership, and remediation steps into a workable operating process.