Governance and Review

AI Governance and Review

If you are planning to use AI in a new workflow, service, or institutional process, UNT System provides a review pathway to help assess the request and guide next steps. Reviews are designed to support responsible adoption of AI by considering factors such as data use, compliance obligations, privacy, accessibility, security, and institutional impact.

Depending on the nature of the request, it may move through a Lite Review or a Comprehensive Review and may be resolved through guidance, committee review, or an enterprise governance review.

If you are requesting Microsoft 365 Copilot, use the M365 Copilot request process.

Governance Pathways

AI requests that enter the governance process are reviewed through one of two pathways. The pathway is determined internally based on the nature of the request and the level of review required.

A streamlined review path for requests that can be assessed more quickly and with a narrower scope. Lite Review is intended to confirm the purpose of the request, understand the proposed use of AI, identify the data involved, evaluate the potential risk and impact, and determine whether the request can move forward with guidance or whether additional review is needed.

A broader review path for requests that require a more detailed assessment. Comprehensive Review may examine issues such as enterprise risk, business purpose and strategy alignment, data classification, privacy, security, accessibility, compliance, user impact, oversight, and operational readiness before a request moves forward.

Possible Outcomes

After an AI request is submitted, it may move forward in different ways depending on the nature of the request and the level of review required.

Some requests may be resolved through guidance, refinement, or enablement support. In these cases, the requestor may receive recommendations, clarifications, or help shaping the request before moving forward. A Community of Practice has been established on each campus, and they may take your request and build it for you.

Some requests may require formal review to evaluate issues such as data use, privacy, security, accessibility, compliance, and institutional fit. In these cases, the request may move through the appropriate governance review process before a final direction is provided.

Requests with broader institutional impact, cross-functional implications, or greater complexity may be elevated for enterprise-level review.

Redirect to the Appropriate Request Path

In some cases, a request may be redirected to the appropriate operational process, such as a UNiTyAI request, an M365 Copilot request, or an AI Review - depending on what is being requested.