ITS Security

Information Security

Approved AI Apps

Applications listed on this page require no additional security review for approved use. The applications have been reviewed and there is a risk memo on file with a designated data owner. Contact ITS with additional questions or to get a confirmation letter for procurement.

APPLICATION PURPOSE APPROVAL EXPIRES RISK
Anthropic Claude AI Assistant and Large Language Models May 13, 2029 Low for non-sensitive data
Amazon Bedrock AI Development Platform (fully managed) April 1, 2028 Low for non-sensitive data
Amazon Comprehend Fully Managed Natural Language Processing Service April 1, 2028 Low for non-sensitive data
Amazon Kendra Search Large Internal Document Collections with Natural Language Queries April 1, 2028 Low for non-sensitive data
Amazon Lex Fully Managed Chatbot and Virtual Assistant Development Using Voice and Text April 1, 2028 Low for non-sensitive data
Amazon Party Rock Code Free Application Creation April 1, 2028 Low for non-sensitive data
Amazon Polly Converts Text into Natural-Sounding Human Speech (TTS) April 1, 2028 Low for non-sensitive data
Amazon Q AI Assistant Streamlines Workflows, Analyzes Data, and Accelerates Software Development April 1, 2028 Low for non-sensitive data
Amazon Rekognition Advanced Image and Video Analysis April 1, 2028 Low for non-sensitive data
Amazon SageMaker AI Development Platform (customer managed) April 1, 2028 Low for non-sensitive data
AWS App Studio Use Natural Language to Build Business Applications in Minutes April 1, 2028 Low for non-sensitive data
ChatGPT AI Chatbot for Human-Like Conversation March 3, 2029 Low for non-sensitive data
Consensus Research/Literature Review AI Tool May 29, 2029 Low for non-sensitive data
CustomGPT.ai No-code platform to build and train AI chatbots and agents on internal data June 29, 2029 Low for non-sensitive data
Dragon Medical One Speech Recognition for Clinicians May 7, 2029 Request POAM (Plan of Action & Milestones) from ITS Security
Elicit Research/Lit Review AI Tool May 29, 2029 Low for non-sensitive data
FanWord Athletic Article Writing Assistance August 1, 2028 Low for non-sensitive data
Google Gemini AI Assistant Chatbot March 12, 2029 Low for non-sensitive data
Grammarly AI Powered Writing Assistant May 23, 2029 Low for non-sensitive data
Microsoft Copilot AI Assistant Chatbot Aug 5, 2028 Low for non-sensitive data
Notebook LM AI Research Assistant and Note-Taking May 27, 2029 Low for non-sensitive data
Plaud AI AI Note-Taking and Voice Recording June 5, 2029 Low for non-sensitive data

The above are approved ONLY for use with ETSU managed accounts - sensitive ETSU data MUST NOT be uploaded to privately contracted services.

Data Types

Sensitive data includes personally identifiable information, personal health information, personal or business financial data, protected health information, and intellectual property. Such data should only be uploaded into paid business Opt-Out accounts, where data are not used to train public AI models. If you are working with sensitive data, contact ITS to discuss sequestered environments in which data are NOT used to train public models.

Risk level increases for sensitive data (e.g. PHI, PII, FERPA, Private, Confidential, Proprietary, Restricted, Business Critical, Financial, etc). Do not upload sensitive data into publicly available AI realms where uploaded data are used to train publicly accessible AI models.

Non-sensitive data is public, unclassified, or completely anonymized information that poses no risk of material harm if exposed.

Human Subjects Research

Data regarding human subjects must not be uploaded to cloud-based AI environments without prior authorization from the Institutional Review Board (IRB). Such data must only be uploaded into paid business Opt-Out accounts, where data are not used to train public AI models. Any exception, including for appropriately de-identified data, must be approved by the Institutional Review Board.

General Guidance

  • ETSU Provost's Generative AI Task Force: Provides Guidance, Core Principles, Implementation Procedures, and Governance
    • Written Guidance for Ethical Use of AI at ETSU: We recommend that you start your journey here! The supplemental guidance document provides specific and practical recommendations to Students, Instructors, Staff, and Researchers. If you are a Student at ETSU, read the section of guidance written for Students. This will provide you with a foundation for discussion of AI use with your individual instructors (see additional student guidance below).
    • Additional Student Guidance: Consult with every instructor prior to using AI tools to assist with assignments. Responsible and acceptable use of AI tools will vary with the nature of assignments, the subject matter, and field-specific discipline. Some instructors may not permit the use of AI tools, others may permit their use for specific purposes, and still others may teach you to use AI tools. Always read the syllabus and check with the instructor in advance!
  • ETSU Policy Regarding the Use of AI for Instructional and Assignment Purposes: The policy is particularly helpful for Instructors incorporating AI tools into classroom and instructional lab activities.