Governance evidence
What agencies reported about the OMB M-25-21 minimum practices for high-impact AI. This is a disclosure analysis, not an audit, a compliance finding or an official assessment. An unanswered question is missing evidence, not evidence that a safeguard is absent.
Practice-by-practice evidence
Denominator: 3,611 records · all use cases in the current filterReported in place: 94 (2.6%)Pre-deployment testing
Reported in progress: 163 (4.5%)Pre-deployment testing
Reported not in place: 1 (0.0%)Pre-deployment testing
No answer reported: 3,353 (92.9%)
Reported in place: 69 (1.9%)AI impact assessment
Reported in progress: 166 (4.6%)AI impact assessment
Reported not in place: 1 (0.0%)AI impact assessment
No answer reported: 3,375 (93.5%)
Reported in place: 110 (3.0%)Independent review
Reported in progress: 153 (4.2%)Independent review
Reported not in place: 2 (0.1%)Independent review
Waived by CAIO: 1 (0.0%)Independent review
No answer reported: 3,345 (92.6%)
Reported in place: 112 (3.1%)Ongoing monitoring
Reported in progress: 154 (4.3%)Ongoing monitoring
Other or ambiguous answer: 1 (0.0%)Ongoing monitoring
No answer reported: 3,344 (92.6%)
Reported in place: 129 (3.6%)Operator training
Reported in progress: 149 (4.1%)Operator training
Other or ambiguous answer: 3 (0.1%)Operator training
No answer reported: 3,330 (92.2%)
Reported in place: 72 (2.0%)Fail-safe
Reported in progress: 84 (2.3%)Fail-safe
Not applicable: 135 (3.7%)Fail-safe
No answer reported: 3,320 (91.9%)
| Practice | In scope | In place | In progress | Not in place | N/A | Precluded or waived | Other | No answer | Answered | In place of applicable |
|---|---|---|---|---|---|---|---|---|---|---|
| Pre-deployment testing | 3611 | 94 | 163 | 1 | 0 | 0 | 0 | 3353 | 7% | 3% of 3611 |
| AI impact assessment | 3611 | 69 | 166 | 1 | 0 | 0 | 0 | 3375 | 7% | 2% of 3611 |
| Independent review | 3611 | 110 | 153 | 2 | 0 | 1 | 0 | 3345 | 7% | 3% of 3610 |
| Ongoing monitoring | 3611 | 112 | 154 | 0 | 0 | 0 | 1 | 3344 | 7% | 3% of 3611 |
| Operator training | 3611 | 129 | 149 | 0 | 0 | 0 | 3 | 3330 | 8% | 4% of 3611 |
| Fail-safe | 3611 | 72 | 84 | 0 | 135 | 0 | 0 | 3320 | 8% | 2% of 3476 |
| Appeal process | 3611 | 25 | 118 | 0 | 143 | 4 | 0 | 3321 | 8% | 1% of 3464 |
| User and public consultation | 3611 | 107 | 111 | 0 | 0 | 0 | 47 | 3346 | 7% | 3% of 3611 |
Answered = records with any answer ÷ records in scope. In place of applicable = reported in place ÷ (in scope minus not applicable, precluded and waived). Unanswered records stay in that denominator, so the rate is a lower bound on reported evidence, not an estimate of real practice.
| Testing | Impact assess. | Indep. review | Monitoring | Training | Fail-safe | Appeal | Consultation | n | |
|---|---|---|---|---|---|---|---|---|---|
| HHS | – | – | – | – | – | – | – | – | 447 |
| NASA | – | – | – | – | – | – | – | – | 425 |
| VA | – | – | – | – | – | – | – | – | 367 |
| DOE | 8% | 3% | 6% | 6% | 10% | 8% | 3% | 19% | 340 |
| DOJ | 0% | 0% | 0% | 0% | 0% | 0% | 0% | 0% | 314 |
| DOI | – | – | 14% | 14% | 14% | 0% | 0% | 0% | 247 |
| DHS | 13% | 11% | 11% | 12% | 12% | 10% | 5% | 8% | 238 |
| DOC | – | – | – | – | – | – | – | – | 223 |
| USDA | 1% | 0% | 0% | 1% | 1% | 1% | 1% | 0% | 162 |
| TREAS | 1% | 1% | 0% | 0% | 1% | 1% | 0% | 2% | 129 |
| DOT | – | – | – | – | – | – | – | – | 70 |
| SEC | – | – | – | – | – | – | – | – | 60 |
| STATE | 3% | 0% | 0% | 3% | 3% | 3% | 2% | 3% | 60 |
| TVA | – | – | – | – | – | – | – | – | 59 |
| ED | – | – | – | – | – | – | – | – | 56 |
| FDIC | – | – | – | – | – | – | – | – | 50 |
| GSA | – | – | – | – | – | – | – | – | 49 |
| DOL | 2% | 2% | 2% | 2% | 0% | 0% | 2% | 0% | 41 |
| FRB | – | – | – | – | – | – | – | – | 38 |
| SBA | 50% | 50% | 50% | 50% | 50% | 100% | 50% | 32% | 34 |
| SSA | 27% | 24% | 24% | 21% | 24% | 25% | 11% | 9% | 33 |
| EPA | 7% | 0% | 0% | 3% | 3% | 4% | 0% | 3% | 29 |
| NSF | – | – | – | – | – | – | – | – | 17 |
| PBGC | – | – | – | – | – | – | – | – | 17 |
| FHFA | – | – | – | – | – | – | – | – | 16 |
| FTC | – | – | – | – | – | – | – | – | 16 |
| NARA | – | – | – | – | – | – | – | – | 14 |
| HUD | – | – | – | – | – | – | – | – | 11 |
| FCC | – | – | – | – | – | – | – | – | 6 |
| FERC | 33% | 83% | 83% | 33% | 33% | 33% | 0% | 33% | 6 |
| NCUA | – | – | – | – | – | – | – | – | 6 |
| NIGC | – | – | – | – | – | – | – | – | 5 |
| NRC | – | – | – | – | – | – | – | – | 4 |
| NTSB | – | – | – | – | – | – | – | – | 4 |
| NEA | – | – | – | – | – | – | – | – | 4 |
| EAC | 25% | – | 0% | – | – | – | – | 100% | 4 |
| CFTC | – | – | – | – | – | – | – | – | 3 |
| FCA | – | – | – | – | – | – | – | – | 3 |
| STB | – | – | – | – | – | – | – | – | 2 |
| OSC | – | – | – | – | – | – | – | – | 1 |
| OSHRC | – | – | – | – | – | – | – | – | 1 |
Hatched cells: the agency answered nothing for that practice, so there is no evidence either way. Compare agencies with care: each agency is one reporting unit, and portfolios differ in size and type.
Records requiring further investigation
3,550 records with at least one practice unanswered or in progressOpen in explorer| Use case | Stage | Test | AIA | Review | Monitor | Train | Fail-safe | Appeal | Consult |
|---|---|---|---|---|---|---|---|---|---|
| Anomaly Detection for Data Quality CFTC · CFTC-001 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Babel DHS · DHS-185 | Deployed | Reported in place | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in place | Other or ambiguous answer |
| Passive Body Scanner DHS · DHS-2380 | Deployed | Reported in place | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Other or ambiguous answer |
| CBP Translate DHS · DHS-2388 | Deployed | Reported in place | Reported in progress | Reported in progress | Reported in progress | Reported in place | Not applicable | Not applicable | Reported in place |
| Open Source and Social Media Analysis DHS · DHS-2538 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Not applicable | Reported in place | Reported in progress |
| Cryptocurrency Analysis DHS · DHS-2561 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Traffic Jam DHS · DHS-2570 | Deployed | Reported in place | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in place | Other or ambiguous answer |
| Mobile Fortify DHS · DHS-2731 | Deployed | Reported in place | Reported in progress | Reported in progress | Reported in place | Reported in place | Reported in place | Not applicable | Reported in place |
| Consular Consolidated Database (CCD) Facial Recognition (FR) On Demand Report (VISA Only) DHS · DHS-365 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| AI-Assisted Resume Screening Tool DHS · DHS-2556 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Reported in progress |
| Mobile Fortify DHS · DHS-2577 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Other or ambiguous answer | Reported in progress | Reported in progress | Reported in progress |
| License Plate Capture and Analysis DHS · DHS-2666 | Deployed | Reported in progress | Reported in progress | Reported in progress | Reported in progress | Other or ambiguous answer | Reported in progress | Reported in progress | Reported in progress |
| Verification Match Model DHS · DHS-2384 | Deployed | Reported in place | Reported in progress | Reported in progress | Reported in place | Reported in progress | Reported in place | Reported in place | Reported in progress |
| The Advanced Trade Analytics Platform (ATAP) DHS · DHS-101 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Public Information Compilation for Travel Threat Analysis (Dataminr) DHS · DHS-183 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Airship Outpost for Conveyance Identification DHS · DHS-188 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Unmanned Aircraft Collision Avoidance DHS · DHS-2383 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Entity Resolution DHS · DHS-24 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Process Efficiency Traveler Identity for Airline Check-in and Bag Drop DHS · DHS-2417 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Customs Broker License Exam - Proctor Support DHS · DHS-310 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Autonomous Surveillance Tower DHS · DHS-35 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Automated Item of Interest Detection DHS · DHS-37 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Vessel Detection DHS · DHS-38 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Vault Access Log (SPVAA) DHS · DHS-401 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Aircraft Landing Location Predictor (KESTREL) DHS · DHS-65 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Passport Anomaly Model DHS · DHS-81 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Agriculture Commodity Model (AGC) DHS · DHS-86 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Trade Entity Risk Model DHS · DHS-95 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Investigative Prioritization Aggregator DHS · DHS-125 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Translation and Transcription for Investigative Data DHS · DHS-2427 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI-Assisted Audio/Video Redaction DHS · DHS-2511 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Dark Web Threat Intelligence for Cyber Investigations DHS · DHS-2517 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Entity Resolution for Global Trade Data DHS · DHS-2547 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Blockchain Analysis DHS · DHS-2575 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Enhanced Lead Identification and Targeting DHS · DHS-2578 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Biometric Check-in for ATD-ISAP (SmartLINK) DHS · DHS-407 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| User and Entity Behavior Analytics (UEBA) DHS · DHS-2434 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Biometrics Enrollment Tool (BET) Fingerprint Quality Check DHS · DHS-14 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Automated Name and Date of Birth (DOB) Harvesting Service DHS · DHS-180 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| ELIS Card Photo Validation Service DHS · DHS-189 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI Security and Monitoring DHS · DHS-2543 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| User Entity and Behavior Analytics (UEBA) for Security Operations (SecOps) Anomaly Identification DHS · DHS-372 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Person-Centric Identity Services Information Compilation Check DHS · DHS-56 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| CBP Careers Bot - Leo DHS · DHS-2366 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| CBP Employee Experience DHS · DHS-2373 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Position Description Generation and Evaluation DHS · DHS-2451 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Global Entry Mobile App Traveler AI Question Answering Service DHS · DHS-2529 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| ChatCBP DHS · DHS-2530 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| GenAI for Document Summarization and Content Generation DHS · DHS-2704 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Cyber Threat Analysis (Recorded Future) DHS · DHS-399 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Empty Container Detection Model (Cargo Insights Team) DHS · DHS-68 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Commodity Detection Model (Cargo Insights Team) DHS · DHS-69 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Cargo Classification Tool DHS · DHS-94 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Critical Infrastructure Network Anomaly Detection DHS · DHS-106 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| CISAChat DHS · DHS-2306 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Automated Detection of Personally Identifiable Information (PII) in Cybersecurity Data DHS · DHS-4 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| OCFO Response Augmentation Suite DHS · DHS-2296 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| OCFO Code Assist GPT DHS · DHS-2441 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Executive Summary GPT DHS · DHS-2710 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Public Assistance Workload Projections DHS · DHS-2720 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Individual Assistance (IA) Predictive Models for Program Quantities DHS · DHS-2722 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI Assisted Compromise Email Detector (AACED) DHS · DHS-2424 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Intelligent Document Processing DHS · DHS-2425 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Cybersecurity Threat Management, Detection, and Response DHS · DHS-2426 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI-Enhanced ICE Tip Processing DHS · DHS-2515 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Media Classifier for Computer and Digital Storage Evidence DHS · DHS-2553 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AI-Powered Developer Tools DHS · DHS-2758 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Open-Source Intelligence for Investigations DHS · DHS-2759 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Normalization Services DHS · DHS-P1 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| DHS-Chat DHS · DHS-2433 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| ESEC Inquiry (STORM) Summarization DHS · DHS-2453 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AdaptiveMFA DHS · DHS-419 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Text Analytics for Survey Responses (TASR) DHS · DHS-45 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Airport Throughput Predictive Model DHS · DHS-2432 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Geographic Current Events Real-Time Alerting Tool DHS · DHS-2518 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| idiCORE Subscriptions DHS · DHS-2522 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| AskTSA DHS · DHS-2604 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Lexis Nexis DHS · DHS-2605 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| SITE Group Subscription Services DHS · DHS-2609 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
| Adaptive Risk Model for Inspected Small Passenger Vessels DHS · DHS-178 | Deployed | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported | No answer reported |
Showing 80 of 3,550, deployed first.
Unanswered analytical questions
Generated from the data; for follow-up with agencies- VA designated 215 use cases high-impact but answered none of the minimum-practice questions for any of them. Were the practices assessed, and where is that recorded?
- NCUA designated 5 use cases high-impact but answered none of the minimum-practice questions for any of them. Were the practices assessed, and where is that recorded?
- TREAS designated 4 use cases high-impact but answered none of the minimum-practice questions for any of them. Were the practices assessed, and where is that recorded?
- 90 high-impact use cases are reported as deployed while their AI impact assessment is reported in progress. Was deployment authorised before the assessment was complete?
- 30 high-impact use cases mark an appeal process as not applicable. On what basis was each individual outcome judged not contestable?
- 87 high-impact use cases report using PII but give no link to a Privacy Impact Assessment. Is a PIA published elsewhere?
- 75 governance answers are ambiguous (for example, an answer option from a different question). What did the agency intend?
These are questions the inventory raises but cannot answer. They are not findings of non-compliance.