AI tools inventory · approvals · evidence
AI tools inventory (what to track + what to prove)
“We don’t know who uses what” is the #1 reason AI governance breaks. Inventory is not an Excel list — it’s a process: owner, purpose, data types, approval status, and change history.
Why inventory matters
- Customer questionnaires ask what AI tools you use and how you govern them.
- Incidents often start with “shadow AI”.
- Without owners, no one answers audits.
What evidence to keep
Decisions
Approval decisions with justification + who approved + timestamps.
Change history
Who changed an entry and when (audit trail).
Link to policy
Inventory should reference the policy and training requirements for the tool/use‑case.
Want an Evidence Pack export?
Inventory + policy + training + audit trail → questionnaire-ready, PII-minimized Evidence Pack.