Governance and accountability

Governance evidence

What agencies reported about the OMB M-25-21 minimum practices for high-impact AI. This is a disclosure analysis, not an audit, a compliance finding or an official assessment. An unanswered question is missing evidence, not evidence that a safeguard is absent.

Governance report

Practice-by-practice evidence

Denominator: 45 records · use cases that answered at least one practice question

Reported in placeReported in progressReported not in placeNot applicableOther or ambiguous answerNo answer reported

Pre-deployment testing

Pre-deployment testing
Reported in place: 7 (15.6%)Pre-deployment testing
Reported in progress: 36 (80.0%)Pre-deployment testing
Reported not in place: 1 (2.2%)Pre-deployment testing
No answer reported: 1 (2.2%)

AI impact assessment

AI impact assessment
Reported in place: 7 (15.6%)AI impact assessment
Reported in progress: 35 (77.8%)AI impact assessment
No answer reported: 3 (6.7%)

Independent review

Independent review
Reported in place: 9 (20.0%)Independent review
Reported in progress: 32 (71.1%)Independent review
Reported not in place: 1 (2.2%)Independent review
No answer reported: 3 (6.7%)

Ongoing monitoring

Ongoing monitoring
Reported in place: 5 (11.1%)Ongoing monitoring
Reported in progress: 37 (82.2%)Ongoing monitoring
No answer reported: 3 (6.7%)

Operator training

Operator training
Reported in place: 7 (15.6%)Operator training
Reported in progress: 35 (77.8%)Operator training
No answer reported: 3 (6.7%)

Fail-safe

Fail-safe
Reported in place: 8 (17.8%)Fail-safe
Reported in progress: 1 (2.2%)Fail-safe
Not applicable: 34 (75.6%)Fail-safe
No answer reported: 2 (4.4%)

Appeal process

Appeal process
Reported in progress: 1 (2.2%)Appeal process
Not applicable: 42 (93.3%)Appeal process
No answer reported: 2 (4.4%)

User and public consultation

User and public consultation
Reported in place: 35 (77.8%)User and public consultation
Reported in progress: 4 (8.9%)User and public consultation
Other or ambiguous answer: 5 (11.1%)User and public consultation
No answer reported: 1 (2.2%)

Practice	In scope	In place	In progress	Not in place	N/A	Other	No answer	Answered	In place of applicable
Pre-deployment testing	45	7	36	1	0	0	1	98%	16% of 45
AI impact assessment	45	7	35	0	0	0	3	93%	16% of 45
Independent review	45	9	32	1	0	0	3	93%	20% of 45
Ongoing monitoring	45	5	37	0	0	0	3	93%	11% of 45
Operator training	45	7	35	0	0	0	3	93%	16% of 45
Fail-safe	45	8	1	0	34	0	2	96%	73% of 11
Appeal process	45	0	1	0	42	0	2	96%	0% of 3
User and public consultation	45	35	4	0	0	5	1	98%	78% of 45

Answered = records with any answer ÷ records in scope. In place of applicable = reported in place ÷ (in scope minus not applicable, precluded and waived). Unanswered records stay in that denominator, so the rate is a lower bound on reported evidence, not an estimate of real practice.

Agency-by-safeguard heatmap

Cell: share reported in place, among applicable recordsIn place Answered

Agency by governance practice
	Testing	Impact assess.	Indep. review	Monitoring	Training	Fail-safe	Appeal	Consultation	n
DOE	8%	8%	14%	6%	8%	100%	0%	83%	36
SBA	50%	50%	50%	50%	50%	100%	0%	25%	4
EAC	0%	–	0%	–	–	–	–	100%	2
SSA	100%	100%	100%	50%	100%	100%	0%	100%	2
DOJ	0%	0%	0%	0%	0%	0%	0%	0%	1

Hatched cells: the agency answered nothing for that practice, so there is no evidence either way. Compare agencies with care: each agency is one reporting unit, and portfolios differ in size and type.

Records requiring further investigation

42 records with at least one practice unanswered or in progressOpen in explorer

Use case	Stage	Test	AIA	Review	Monitor	Train	Fail-safe	Appeal	Consult
Copilot Studio DOE · DOE-444	Deployed	Reported in progress	Reported in place	Reported in place	Reported in progress	Reported in place	Reported in place	Not applicable	Other or ambiguous answer
Copilot for Microsoft 365 DOE · DOE-452	Deployed	Reported in progress	Reported in place	Reported in place	Reported in progress	Reported in place	Reported in place	Not applicable	Other or ambiguous answer
Microsoft Bing Service DOE · DOE-510	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Visual Studio Enterprise DOE · DOE-519	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft OneNote DOE · DOE-525	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Azure Authoring Tools DOE · DOE-536	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft ScreenSketch DOE · DOE-551	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Visual C++ Additional Runtime DOE · DOE-552	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Project DOE · DOE-556	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Copilot DOE · DOE-577	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
GitHub Copilot DOE · DOE-586	Deployed	Reported in place	Reported in place	Reported in place	Reported in place	Reported in progress	Reported in place	Not applicable	Reported in place
Microsoft Visual C++ Redistributable DOE · DOE-596	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Teams DOE · DOE-599	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Search in Bing DOE · DOE-602	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Teams Classic DOE · DOE-608	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft MSPaint DOE · DOE-623	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Visual Studio Community DOE · DOE-631	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft OneDrive DOE · DOE-634	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft 365 DOE · DOE-651	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Visual C++ Minimum Runtime DOE · DOE-667	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft OneDrive MUI DOE · DOE-669	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft 365 Apps for Enterprise DOE · DOE-685	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Outlook MUI DOE · DOE-691	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Edge DOE · DOE-698	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
SQL Server Management Studio DOE · DOE-710	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Exchange Server DOE · DOE-711	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Skype App DOE · DOE-721	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft OneNote MUI DOE · DOE-735	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft PowerPoint MUI DOE · DOE-744	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Power BI Desktop DOE · DOE-748	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Microsoft Azure PowerShell DOE · DOE-749	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
Dragon DOJ · DOJ-0196	Deployed	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress
Microsoft Co-Pilot DOE · DOE-518	Pilot	Reported in place	No answer reported	Reported in place	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in place
M365 Copilot DOE · DOE-574	Pilot	Reported in place	Reported in progress	Reported in progress	Reported in place	Reported in place	Reported in place	Not applicable	Other or ambiguous answer
Microsoft Copilot (Pilot) DOE · DOE-603	Pilot	Reported in progress	Reported in progress	Reported in place	Reported in progress	Reported in progress	Reported in place	Not applicable	Reported in progress
Microsoft Copilot Pilot DOE · DOE-676	Pilot	Reported in progress	Reported in progress	No answer reported	No answer reported	No answer reported	Not applicable	Not applicable	Other or ambiguous answer
CoPilot DOE · DOE-734	Pilot	Reported in progress	Reported in progress	No answer reported	Reported in progress	Reported in progress	Not applicable	Not applicable	No answer reported
Internal Generative AI Tools for Staff Productivity EAC · EAC-2	Pilot	Reported not in place	No answer reported	Reported not in place	No answer reported	No answer reported	No answer reported	No answer reported	Reported in place
Routing emails from shared inboxes EAC · EAC-4	Pilot	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	No answer reported	Reported in place
Meeting Minutes Summary Tool SBA · SBA-1	Pre-deployment	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in progress
Business Development SBA · SBA-2	Pre-deployment	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Reported in progress	Not applicable	Not applicable	Reported in progress
Policy Assistance Tool (PAT) SSA · R3116	Pilot	Reported in place	Reported in place	Reported in place	Reported in progress	Reported in place	Reported in place	Not applicable	Reported in place

Unanswered analytical questions

Generated from the data; for follow-up with agencies

4 high-impact use cases mark an appeal process as not applicable. On what basis was each individual outcome judged not contestable?
2 high-impact use cases report using PII but give no link to a Privacy Impact Assessment. Is a PIA published elsewhere?
34 governance answers are ambiguous (for example, an answer option from a different question). What did the agency intend?

These are questions the inventory raises but cannot answer. They are not findings of non-compliance.