AI Tool Intake / Request Form · Gold Aviation AI

Requestor

Name *

Email *

Department

Manager

Tool §4.2.A

Tool name *

Vendor

Version

Product URL

Intended use case *

Data & integration

Data types the tool will access or process

None / public only Internal business data PII PHI PCI / payment Passenger / crew data SSI

SSI is never entered into a public or unapproved AI tool (§9.1.E). Selecting PII, PHI, PCI, or SSI forces Tier 3.

Integration points

Authentication method

Data residency

Does the vendor train on customer data?

Vendor compliance certifications

Link to vendor security documentation

Justification

Business justification *

Is this agentic?

Agentic means it takes autonomous actions. That is a Tier 3 criterion (§4.3) and needs an Action Scope document.

Your proposed risk tier

The CISO sets the final tier. This is a starting point, not a decision.

Submitting records this request and notifies the CISO. Do not start using the tool for Company work until it appears in the Approved Tool Registry (§4.1.A).