AI Inventory, Use-Case Intake, and Risk Triage

Step zero of every governance program: finding the AI you already have — including the shadow and embedded kind — building a registry that stays true, designing proportionate intake, and triaging every use case to a risk tier mapped to the laws that bite.

Content current as of 2026-09.

Lessons

  1. Step zero: seeing what you have
  2. What counts, and what the record holds
  3. The intake pipeline
  4. Risk tiers and the regulatory map
  5. Re-triage, linkage, and the end of life