Governance and accountability
Governance evidence
What agencies reported about the OMB M-25-21 minimum practices for high-impact AI. This is a disclosure analysis, not an audit, a compliance finding or an official assessment. An unanswered question is missing evidence, not evidence that a safeguard is absent.
Practice-by-practice evidence
Denominator: 206 records · all use cases in the current filterReported in placeReported in progressReported not in placeNot applicableOther or ambiguous answerNo answer reported
Pre-deployment testing
Pre-deployment testing
Reported in place: 21 (10.2%)Pre-deployment testing
Reported in progress: 53 (25.7%)Pre-deployment testing
Reported not in place: 1 (0.5%)Pre-deployment testing
No answer reported: 131 (63.6%)
206Reported in place: 21 (10.2%)Pre-deployment testing
Reported in progress: 53 (25.7%)Pre-deployment testing
Reported not in place: 1 (0.5%)Pre-deployment testing
No answer reported: 131 (63.6%)
AI impact assessment
AI impact assessment
Reported in place: 16 (7.8%)AI impact assessment
Reported in progress: 55 (26.7%)AI impact assessment
No answer reported: 135 (65.5%)
206Reported in place: 16 (7.8%)AI impact assessment
Reported in progress: 55 (26.7%)AI impact assessment
No answer reported: 135 (65.5%)
Independent review
Independent review
Reported in place: 19 (9.2%)Independent review
Reported in progress: 49 (23.8%)Independent review
Reported not in place: 2 (1.0%)Independent review
No answer reported: 136 (66.0%)
206Reported in place: 19 (9.2%)Independent review
Reported in progress: 49 (23.8%)Independent review
Reported not in place: 2 (1.0%)Independent review
No answer reported: 136 (66.0%)
Ongoing monitoring
Ongoing monitoring
Reported in place: 16 (7.8%)Ongoing monitoring
Reported in progress: 52 (25.2%)Ongoing monitoring
No answer reported: 138 (67.0%)
206Reported in place: 16 (7.8%)Ongoing monitoring
Reported in progress: 52 (25.2%)Ongoing monitoring
No answer reported: 138 (67.0%)
Operator training
Operator training
Reported in place: 19 (9.2%)Operator training
Reported in progress: 49 (23.8%)Operator training
No answer reported: 138 (67.0%)
206Reported in place: 19 (9.2%)Operator training
Reported in progress: 49 (23.8%)Operator training
No answer reported: 138 (67.0%)
Fail-safe
Fail-safe
Reported in place: 10 (4.9%)Fail-safe
Reported in progress: 8 (3.9%)Fail-safe
Not applicable: 54 (26.2%)Fail-safe
No answer reported: 134 (65.0%)
206Reported in place: 10 (4.9%)Fail-safe
Reported in progress: 8 (3.9%)Fail-safe
Not applicable: 54 (26.2%)Fail-safe
No answer reported: 134 (65.0%)
| Practice | In scope | In place | In progress | Not in place | N/A | Precluded or waived | Other | No answer | Answered | In place of applicable |
|---|---|---|---|---|---|---|---|---|---|---|
| Pre-deployment testing | 206 | 21 | 53 | 1 | 0 | 0 | 0 | 131 | 36% | 10% of 206 |
| AI impact assessment | 206 | 16 | 55 | 0 | 0 | 0 | 0 | 135 | 34% | 8% of 206 |
| Independent review | 206 | 19 | 49 | 2 | 0 | 0 | 0 | 136 | 34% | 9% of 206 |
| Ongoing monitoring | 206 | 16 | 52 | 0 | 0 | 0 | 0 | 138 | 33% | 8% of 206 |
| Operator training | 206 | 19 | 49 | 0 | 0 | 0 | 0 | 138 | 33% | 9% of 206 |
| Fail-safe | 206 | 10 | 8 | 0 | 54 | 0 | 0 | 134 | 35% | 7% of 152 |
| Appeal process | 206 | 2 | 10 | 0 | 60 | 0 | 0 | 134 | 35% | 1% of 146 |
| User and public consultation | 206 | 48 | 16 | 0 | 0 | 0 | 12 | 130 | 37% | 23% of 206 |
Answered = records with any answer ÷ records in scope. In place of applicable = reported in place ÷ (in scope minus not applicable, precluded and waived). Unanswered records stay in that denominator, so the rate is a lower bound on reported evidence, not an estimate of real practice.
| Testing | Impact assess. | Indep. review | Monitoring | Training | Fail-safe | Appeal | Consultation | n | |
|---|---|---|---|---|---|---|---|---|---|
| DOE | 9% | 4% | 11% | 6% | 9% | 21% | 0% | 65% | 54 |
| DOJ | 0% | 0% | 0% | 0% | 0% | 0% | 0% | 0% | 37 |
| SBA | 65% | 65% | 65% | 65% | 65% | 100% | 67% | 40% | 20 |
| HHS | – | – | – | – | – | – | – | – | 18 |
| DHS | – | – | – | – | – | – | – | – | 11 |
| SSA | 10% | 0% | – | – | – | – | – | – | 10 |
| VA | – | – | – | – | – | – | – | – | 7 |
| TREAS | 14% | 14% | 0% | 0% | 14% | 14% | 0% | 14% | 7 |
| USDA | – | – | – | – | – | – | – | – | 6 |
| SEC | – | – | – | – | – | – | – | – | 5 |
| FHFA | – | – | – | – | – | – | – | – | 4 |
| EAC | 25% | – | 0% | – | – | – | – | 100% | 4 |
| NRC | – | – | – | – | – | – | – | – | 3 |
| HUD | – | – | – | – | – | – | – | – | 3 |
| DOT | – | – | – | – | – | – | – | – | 3 |
| STATE | – | – | – | – | – | – | – | – | 3 |
| FRB | – | – | – | – | – | – | – | – | 2 |
| NIGC | – | – | – | – | – | – | – | – | 1 |
| FDIC | – | – | – | – | – | – | – | – | 1 |
| DOL | – | – | – | – | – | – | – | – | 1 |
| FERC | – | – | – | – | – | – | – | – | 1 |
| DOI | – | – | – | – | – | – | – | – | 1 |
| OSC | – | – | – | – | – | – | – | – | 1 |
| FTC | – | – | – | – | – | – | – | – | 1 |
| OSHRC | – | – | – | – | – | – | – | – | 1 |
| NARA | – | – | – | – | – | – | – | – | 1 |
Hatched cells: the agency answered nothing for that practice, so there is no evidence either way. Compare agencies with care: each agency is one reporting unit, and portfolios differ in size and type.
Records requiring further investigation
193 records with at least one practice unanswered or in progressOpen in explorer| Use case | Stage | Test | AIA | Review | Monitor | Train | Fail-safe | Appeal | Consult |
|---|---|---|---|---|---|---|---|---|---|
| Dark Web Threat Intelligence for Cyber Investigations DHS · DHS-2517 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Enhanced Lead Identification and Targeting DHS · DHS-2578 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI Security and Monitoring DHS · DHS-2543 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| CISAChat DHS · DHS-2306 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Executive Summary GPT DHS · DHS-2710 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI-Enhanced ICE Tip Processing DHS · DHS-2515 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI-Powered Developer Tools DHS · DHS-2758 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Open-Source Intelligence for Investigations DHS · DHS-2759 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AskTSA DHS · DHS-2604 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Lexis Nexis DHS · DHS-2605 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| ServiceNow Predictive Intelligence DOE · DOE-430 | Deployed | Reported in place | Reported in progress | Reported in place | Reported in place | Reported in place | Not applicable | Not applicable | Reported in place |
| Microsoft 365 Copilot (Productivity Suite) DOE · DOE-433 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Microsoft Power Platform capability that provides AI to automate processes in Power Apps and Power Automate DOE · DOE-436 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Databricks AI for Cloud Data Warehouse DOE · DOE-439 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Text To Speech Audio Generation DOE · DOE-442 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Copilot Studio DOE · DOE-444 | Deployed | Reported in progress | Reported in place | Reported in place | Reported in progress | Reported in place | Reported in place | Not applicable | Other or ambiguous answer |
| Copilot for Microsoft 365 DOE · DOE-452 | Deployed | Reported in progress | Reported in place | Reported in place | Reported in progress | Reported in place | Reported in place | Not applicable | Other or ambiguous answer |
| ChatGPT Enterprise DOE · DOE-498 | Deployed | Reported in place | Reported in progress | Reported in place | Reported in place | Reported in place | Not applicable | Not applicable | Reported in place |
| Microsoft Bing Service DOE · DOE-510 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Visual Studio Enterprise DOE · DOE-519 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft OneNote DOE · DOE-525 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Azure Authoring Tools DOE · DOE-536 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Apple Intelligence DOE · DOE-549 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft ScreenSketch DOE · DOE-551 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Visual C++ Additional Runtime DOE · DOE-552 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Project DOE · DOE-556 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Google Chrome Generative AI DOE · DOE-561 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| GitHub Co-Pilot DOE · DOE-571 | Deployed | Reported in place | No answer reported | Reported in place | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Copilot DOE · DOE-577 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Visual C++ Redistributable DOE · DOE-596 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Teams DOE · DOE-599 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Search in Bing DOE · DOE-602 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Teams Classic DOE · DOE-608 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft MSPaint DOE · DOE-623 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Visual Studio Community DOE · DOE-631 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft OneDrive DOE · DOE-634 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft 365 DOE · DOE-651 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Visual C++ Minimum Runtime DOE · DOE-667 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft OneDrive MUI DOE · DOE-669 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft 365 Apps for Enterprise DOE · DOE-685 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Outlook MUI DOE · DOE-691 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Edge DOE · DOE-698 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| SQL Server Management Studio DOE · DOE-710 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Exchange Server DOE · DOE-711 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Skype App DOE · DOE-721 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft OneNote MUI DOE · DOE-735 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Copilot Studio DOE · DOE-739 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Microsoft PowerPoint MUI DOE · DOE-744 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Power BI Desktop DOE · DOE-748 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Microsoft Azure PowerShell DOE · DOE-749 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Not applicable | Reported in place |
| Alation Data Catalog DOJ · DOJ-0004 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Palantir (via access to external state LE system) DOJ · DOJ-0025 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Veritone Redact DOJ · DOJ-0033 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Azure Platform/Tools - Network Routing DOJ · DOJ-0054 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Data & Analytics: Database Tools DOJ · DOJ-0069 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Critical Mention DOJ · DOJ-0116 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Evidence.com DOJ · DOJ-0117 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Insider Threat Management and User Activity Monitoring DOJ · DOJ-0119 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Enterprise Telecommunications Information System DOJ · DOJ-0125 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Descript DOJ · DOJ-0150 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Wellsaid DOJ · DOJ-0172 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Exiger Supply Chain Risk Management - DDIQ Research Engine DOJ · DOJ-0174 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Exiger Supply Chain Risk Management - DDIQ Due Diligence Analytics DOJ · DOJ-0175 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Axon DOJ · DOJ-0199 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Pacer Search DOJ · DOJ-0215 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| JAWS (Text-to-Speech Assistant for Accessibility) DOJ · DOJ-0222 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Deposition Transcript Management DOJ · DOJ-0224 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Aware DOJ · DOJ-0235 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Palantir DOJ · DOJ-0272 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| CoHost AI (Podcast hosting service feature) DOJ · DOJ-0311 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Code Development DOJ · DOJ-0312 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| ATR Expert/Consulting with Bates White DOJ · DOJ-0332 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Adobe Premiere DOJ · DOJ-0351 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Adobe Photoshop DOJ · DOJ-0352 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Acquisition Support Tool DOJ · DOJ-0353 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Audio Transcription DOL · DOL-03 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Conversational Multi-modal Chatbot (Google Gemini) DOT · DOT-1000215 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Report Sumarization (Google NotebookLM) DOT · DOT-1000216 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Grants Lifecycle Application System EAC · EAC-3 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | Reported in place |
| Criminal Background Investigation FDIC · FDIC-60 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
Showing 80 of 193, deployed first.
Unanswered analytical questions
Generated from the data; for follow-up with agencies- VA designated 3 use cases high-impact but answered none of the minimum-practice questions for any of them. Were the practices assessed, and where is that recorded?
- 8 high-impact use cases are reported as deployed while their AI impact assessment is reported in progress. Was deployment authorised before the assessment was complete?
- 2 high-impact use cases mark an appeal process as not applicable. On what basis was each individual outcome judged not contestable?
- 14 high-impact use cases report using PII but give no link to a Privacy Impact Assessment. Is a PIA published elsewhere?
- 55 governance answers are ambiguous (for example, an answer option from a different question). What did the agency intend?
These are questions the inventory raises but cannot answer. They are not findings of non-compliance.