The AI register: decision and status
Allowing a tool puts it in the register. The four decisions, where you make them, how you complete a registration and what a tool page shows.
When you allow an AI tool, fully or with limits, it goes into the AI register. The register is your organisation's own record of the AI tools you use. For each tool you note what you use it for, who is responsible for it, which documents belong to it and when you will assess it again. This article explains which decisions exist, where you make them and how you complete a registration.
AI register in the dashboardAt the top of the menu, with the Inbox right below it while tools are waiting for a decision.The four decisions
Every tool starts at No decision yet. BeeSensible never decides on behalf of your organisation and never preselects a button. The risk band from the catalogue is there as information for your decision.
| Decision | What it means |
|---|---|
| Allowed | Employees use the tool without a notice. |
| Limited use | The tool is allowed under a condition you write yourself, such as "General questions are fine, no personal or customer data." Employees see that sentence when they open the tool, so a short and concrete condition works best. |
| Not allowed | Anyone who opens the tool sees a notice with the alternative you have designated. |
| No decision yet | You have not decided about the tool yet. If it is in use, it appears in the Inbox. |
There is also Under review. This is a parked decision rather than a fifth kind of decision: Decide later takes a tool out of the Inbox while it still has no decision.
Deciding and undoing
You can decide in three places: in the Inbox, in the catalogue (also for several tools at once) and on the tool page in the Decision card. In that card you later change a decision with Change and add a Reason, which goes into the tool's history. For every decision, BeeSensible records who made it and when.
If you made the wrong decision, Undo restores the previous state. If nobody had completed the registration yet, the tool also leaves the register again.
If you disallow a tool that is already in the register, it moves to Out of use. The registration and the history are kept.
Completing a registration
Allowing is registering: the decision creates the registration but does not fill it in yet. You are already listed as responsible, and the first reassessment is planned for a year from now. After the decision, choose Complete the registration to record the rest in three steps:
- Under Use cases you record what you use the tool for. Use cases explains how this works.
- Under Responsible you add who is responsible for the tool besides you.
- Under Documents you record which documents already exist; the rest can be added later. See Responsible people and documents.
You can stop after any step and continue later. Until the registration has at least one use case and one responsible person, the tool appears under To complete.
Views and filters
The register has four views: Allowed (/register), Under review (/register/under-review), Not allowed (/register/not-allowed) and All tools (/catalog). The last of these is the catalogue.
In the Allowed view, the filters To complete, Due for reassessment and Documents open show what still needs doing. The Needs attention filter combines those three and gives the reason for each tool. Home shows the same counts under "To do in AI Governance".
When you stop using a tool, choose Take out of use. The tool gets an end date and keeps its history, but no more reassessment reminders are sent for it. Take back into use reverses this.
The tool page
Every tool you have made a decision about has its own page. This also applies to tools that are not, or no longer, in the register, such as a disallowed tool.
| Tab | What it shows |
|---|---|
| Overview | The decision, the registration and "About the tool": the catalogue facts, which you cannot edit here. |
| Policy | Notice, detection profile and masking; see Policy per tool. |
| Use cases | What you use the tool for. This tab exists only for a tool with a registration. |
| Measured | What BeeSensible saw in the last 30 days, alongside what you recorded. |
| History | Every change, with who made it and when. |
If what BeeSensible sees differs from what you recorded, the Measured tab shows a signal, with a button to the place where you update the registration. Below that are the visits and the types of use. These are always counts, without who typed something and without what it said. Usage figures appear from 5 active users.
Which signals the Measured tab shows
- "{use case} occurs, but is not recorded": BeeSensible sees use that is not in the registration. The opposite signal is "is recorded, but does not occur".
- "Personal data is being found": BeeSensible finds personal data in the tool, while no use case says personal data is processed.
- "Personal data found, DPIA not settled".
- "Critical data sent without change", or for data at Standard level "Sensitive data sent without change".
- "Retired, but still visited".
When you use demo data, the register says so above the list and saves nothing you change. How to assess a tool again is described in Review, and how to export the register in The register as PDF and CSV.