SBA · SBA-24 · record R3183

Secure IL5 AI

Small Business Administration · OCIO: Office of the Chief Information Officer

Overview

Development stage: RetiredSource: d) Retired – The use case was reported in the agency’s prior year’s inventory, but its development and/or use has since been discontinued.
High-impact designation: Not high-impactSource: c) Not high-impact
Impact justification: Not high impact: This AI system does not meet the criteria of any of the six pillars that make up High Impact AI in Memorandum M-25-21.
Start date: 2025-06-26 (day precision)Source: 06/26/2025 00:00:00
Withheld from public reporting: NoSource: a) No

Mission

Topic area: Service Delivery
Operational functions: Document processing and extraction Derived by keyword rules; see methodology

Problem the AI is intended to solve

Government teams need secure AI capabilities that meet federal security requirements for analyzing sensitive data, generating content, and streamlining knowledge work without compromising data security or compliance.

Expected benefits

FedRAMP High authorized AI platform enables secure AI adoption across government agencies, enhances productivity through automated analysis and content generation, maintains data security and compliance, and provides flexible deployment options across classification levels.

System outputs

FedRAMP High and DoD IL5/IL6/Top Secret authorized generative AI platform designed for government and defense. Provides secure access to multiple large language models for text, image, and audio processing. Supports ingesting various data formats including DOCX, PDF, JSON, CSV, and real-time APIs. Input: natural language queries and document uploads. Output: AI-generated responses, data analysis, and document processing results.

Technology

AI classification: Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
System name(s): Ask Sage Platform
Custom-developed code: No
Public source code: Not applicable - No custom code

Sourcing

How it was built: Purchased from vendorSource: a) Purchased from a vendor
Vendor (as reported): Ask Sage, Inc.
Vendors (standardized): Ask Sage

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII: No
Privacy Impact Assessment: Not publicly available
Authorization to Operate: Yes
Demographic features: k) None of the above
Training and evaluation data: Commercial vendor-managed training data
Federal Data Catalog: Not applicable - Proprietary vendor training data

Governance

8 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Pre-deployment testingReported in placeSource: a) Yes

AI impact assessmentReported in placeSource: a) Yes

Independent reviewReported in placeSource: a) Yes – by another appropriate agency office or reviewer not directly involved in the AI’s development

Ongoing monitoringReported in placeSource: a) Yes, sufficient monitoring protocols have been established

Operator trainingReported in placeSource: a) Yes, sufficient and periodic training has been established

Fail-safeNot applicableSource: b) Not applicable

Appeal processNot applicableSource: b) Not applicable

User and public consultationOther or ambiguous answerSource: Conducted security and usability testing with government users, collected feedback through pilot programs, established security review processes, and continuous monitoring of compliance with federal security requirements.Flag: free-text answer

Potential impacts and how they were identified

Potential impacts include data security, compliance with federal security requirements, and quality of AI-generated content for sensitive government operations. Impacts identified through FedRAMP High authorization process, security testing, and pilot deployment. Mitigation includes FedRAMP High/DoD authorization controls, data encryption, access controls, audit logging, and user training on handling classified information.