Registry
Approved Tool Registry & Prohibited Tools List
The Company’s authoritative list of AI tools approved for use, and the prohibited list. Maintained live rather than as a static table in the policy.
§5 · App. B Open to all
Planned content
  • Tool name, vendor
  • Approved use case
  • Risk tier, 1 Low to 4 Prohibited
  • Permitted access level, approved user roles
  • Data classes permitted, specific prohibitions
  • Tool owner
  • Approval date, next review date
  • Status: approved, de-listed, prohibited
Deliberately open. §5.2.B makes every employee responsible for checking the registry before using any AI tool, so read access is not behind CISO access. Editing is.