AI Use-Case Approval Gate

Approve a bounded workflow—not “AI” in general. The record should explain why the use is worth doing and what would make the organization stop.

1. Business case

Specific workflow and intended outcome
Named business owner
Baseline cost/time/error rate
Expected measurable benefit
90-day validation threshold and kill criterion

2. Exposure

Data sensitivity and confidentiality
People materially affected by outputs
Customer-facing or decision-making use
Human review and override points
Failure modes and maximum credible impact

3. Evidence

Vendor due diligence completed
Testing evidence attached
Applicable transparency/disclosure questions assessed
Monitoring metric and review cadence defined
Incident/escalation owner named

4. Decision

GO: evidence supports deployment within defined limits.
CONDITIONAL: deploy only after named mitigations are completed.
NO-GO: expected value or risk controls are insufficient.

Use this as a tracked workbook →