AI Use Resources

Use authoritative sources to verify how a particular AI service handles data, tools, retention, access control, and current product behavior.

Governance and risk management

• NIST AI Risk Management Framework — voluntary guidance for incorporating trustworthiness into AI design, development, use, and evaluation.
• NIST Generative AI Profile — risk considerations and actions that are specific to generative AI.
• OECD AI Principles — international principles for trustworthy AI.

Technical and operational sources

• The current documentation and privacy/security materials for the AI product in use.
• The organization’s own information-security, data-classification, retention, procurement, and acceptable-use policies.
• Primary sources for facts that an AI-produced answer claims or cites.

Before enabling tool use, integrations, or autonomous actions, confirm the product’s current permission model, data handling, logging, and approval controls. Product behavior changes frequently; vendor documentation is the authoritative source for its own service.