Federal AI Intelligence
Menu
Snapshot · OMB 2025 inventory · processed Oct 11, 2026
Governance and accountability

Governance evidence

What agencies reported about the OMB M-25-21 minimum practices for high-impact AI. This is a disclosure analysis, not an audit, a compliance finding or an official assessment. An unanswered question is missing evidence, not evidence that a safeguard is absent.

Agency
Stage
High-impact
Topic
AI type1
Sourcing1
Vendor
Function
Start year

Only records with a parseable start date match a year filter.

AI type: Generative AISourcing: Contract and in-house

Practice-by-practice evidence

Denominator: 10 records · use cases that answered at least one practice question
Reported in placeReported in progressNot applicableOther or ambiguous answerNo answer reported
PracticeIn scopeIn placeIn progressNot in placeN/APrecluded or waivedOtherNo answerAnsweredIn place of applicable
Pre-deployment testing104600000100%40% of 10
AI impact assessment103700000100%30% of 10
Independent review10350000280%30% of 10
Ongoing monitoring10350000280%30% of 10
Operator training10440000280%40% of 10
Fail-safe104204000100%67% of 6
Appeal process100208000100%0% of 2
User and public consultation104400020100%40% of 10

Answered = records with any answer ÷ records in scope. In place of applicable = reported in place ÷ (in scope minus not applicable, precluded and waived). Unanswered records stay in that denominator, so the rate is a lower bound on reported evidence, not an estimate of real practice.

Agency-by-safeguard heatmap

Cell: share reported in place, among applicable recordsIn placeAnswered
Agency by governance practice
TestingImpact assess.Indep. reviewMonitoringTrainingFail-safeAppealConsultationn
SSA100%100%100%50%100%100%0%100%2
SBA0%0%0%0%0%0%0%0%2
DOE0%0%–––0%0%0%2
DOJ0%0%0%0%0%0%0%0%1
DHS0%0%0%0%0%0%0%0%1
FERC100%100%100%100%100%100%0%100%1
STATE100%0%0%100%100%100%0%100%1

Hatched cells: the agency answered nothing for that practice, so there is no evidence either way. Compare agencies with care: each agency is one reporting unit, and portfolios differ in size and type.

Records requiring further investigation

8 records with at least one practice unanswered or in progressOpen in explorer
Use caseStageTestAIAReviewMonitorTrainFail-safeAppealConsult
AI-Assisted Resume Screening Tool
DHS · DHS-2556
DeployedReported in progressReported in progressReported in progressReported in progressReported in progressReported in progressReported in progressReported in progress
Data & Analytics: Healthcare Fraud Detection
DOJ · DOJ-0071
DeployedReported in progressReported in progressReported in progressReported in progressReported in progressReported in progressReported in progressReported in progress
Electronic Health Record AI Enhancements
STATE · R3248
DeployedReported in placeReported in progressReported in progressReported in placeReported in placeReported in placeNot applicableReported in place
LISA Chatbot Pilot
DOE · DOE-671
PilotReported in progressReported in progressNo answer reportedNo answer reportedNo answer reportedNot applicableNot applicableOther or ambiguous answer
Amazon Q Chatbot Pilot
DOE · DOE-700
Pre-deploymentReported in progressReported in progressNo answer reportedNo answer reportedNo answer reportedNot applicableNot applicableOther or ambiguous answer
ODRR Comm - Talking Point Generation
SBA · SBA-6
Pre-deploymentReported in progressReported in progressReported in progressReported in progressReported in progressNot applicableNot applicableReported in progress
Amazon Q in Connect
SBA · SBA-9
Pre-deploymentReported in progressReported in progressReported in progressReported in progressReported in progressNot applicableNot applicableReported in progress
Policy Assistance Tool (PAT)
SSA · R3116
PilotReported in placeReported in placeReported in placeReported in progressReported in placeReported in placeNot applicableReported in place

Unanswered analytical questions

Generated from the data; for follow-up with agencies
  1. DOE designated 3 use cases high-impact but answered none of the minimum-practice questions for any of them. Were the practices assessed, and where is that recorded?
  2. 3 high-impact use cases are reported as deployed while their AI impact assessment is reported in progress. Was deployment authorised before the assessment was complete?
  3. 3 high-impact use cases mark an appeal process as not applicable. On what basis was each individual outcome judged not contestable?
  4. 1 high-impact use cases report using PII but give no link to a Privacy Impact Assessment. Is a PIA published elsewhere?
  5. 2 governance answers are ambiguous (for example, an answer option from a different question). What did the agency intend?

These are questions the inventory raises but cannot answer. They are not findings of non-compliance.