AI cases and inquiries overview

The AI Case Management application is used as part of AI Risk and Compliance (AIRC). It provides the workflows used to review, investigate, and respond to AI‑related risks, incidents, and governance questions associated with AI systems, models, and datasets governed in AI Control Tower (AICT). AI cases and inquiries help identify potential issues, capture governance signals, and ensure that AI systems align with organizational policies, regulatory expectations, and ethical principles across the AI life cycle. You can view AI cases and inquiries from the AI Risk and Compliance dashboard.

AI cases and AI inquiries

AI cases and AI inquiries represent two related intake types used to capture AI-related input from users and stakeholders.

AI cases are typically used to report observed AI-related concerns, risks, incidents, or potential noncompliance. AI inquiries are used to ask questions or request guidance related to AI systems, acceptable usage, governance requirements, or next steps.

Submission and intake

AI Case Business Users [sn_ai_case_mgmt.ai_case_business_user] submit AI cases and inquiries through the Employee Center to report concerns or request guidance. Submissions include descriptive information that helps reviewers understand context, such as the AI system, model, or dataset involved, observed behavior or concern, impacted users or business areas, and any supporting details or attachments. For more information, see Report an AI case from the Employee Center.

After upgrading to version 22.0.3 and installing the AI Case Management application, organizations can enable anonymous submission of AI cases through the Employee Center. Anonymous reporting supports broader participation in AI governance while protecting the identity of the reporter.

Before an anonymous report is saved, all free‑text fields in the forms (such as case type, summary, business unit, and jurisdiction) are sanitized to accomplish the following.

• Remove HTML and embedded script or style content
• Restrict input to standard alphanumeric characters and basic punctuation
• Trim extra whitespaces

For more information, see Report an AI case anonymously, Follow up on a report from the Anonymous Reporting Center, and Anonymous Reporting Center.

Case management and follow-up

After submission, AI cases and inquiries are managed in the AI Risk and Compliance Workspace. AI Risk and Compliance analysts [sn_ai_case_mgmt.ai_case_analyst] review case details, investigate reported issues, assess potential impact, and work assigned governance tasks.

AI Risk and Compliance managers [sn_grc_ai_gov.ai_risk_and_compliance_manager] who inherit the AI case manager [sn_ai_case_mgmt.ai_case_manager] role oversee case status, prioritize work, and coordinate follow-up across governance teams. Cases can result in tasks, identification of impacted areas such as policies or regulations, and the creation of related issues to support remediation, escalation, or ongoing governance activities across the AI life cycle.

Roles and access

Access to create and manage AI cases and inquiries is controlled through roles that support separation of duties and least-privilege access.

Business users focus on reporting concerns and requesting guidance. Analysts and managers focus on investigation, assessment, coordination, and oversight. AI stewards [sn_ai_governance_ai_steward] and other governance stakeholders, such as security, legal, privacy, or data governance teams, contribute expertise and perform review or remediation tasks as needed.

Governance stakeholders participate in case review and investigation activities without owning business outcomes or life cycle approval decisions.

For more information, see Roles installed with AI Risk and Compliance.