Explore
Write
Chat
Call
Artificial Intelligence
Guidance Chart for Using AI Tools
Service navigation
This matrix clarifies where UT users may input university data using AI tools based on UT’s data classification.
| Type of Information | Public | Internal to UT | Private | FERPA | PII | PHI/HIPPA | CUI |
|---|---|---|---|---|---|---|---|
| Free / public AI services |  |  | | | | | |
| UT-managed/contracted AI platforms: UT Verse and UT AI Hub | | | | | | | |
| UT AI Hub/UT Verse with web search disabled | | | |  | | | |
| AI features native to purchased software solutions | | | | | | | |
| Locally installed LLM (non-networked/offline) | | | | | | | |
Key
Yes: You may input this type of information into this type of AI tool.
Limited use: Requires coordination with the campus IT department and the Governance, Risk, and Compliance (GRC) team to validate security, privacy, and policy compliance before the data set may be used.
No: You may not input this type of information into this type of AI tool.
Examples and Clarifications
- Public-facing AI tools may ONLY be used with public data
Examples: ChatGPT Free, Gemini Free, MS Copilot Free, any mobile app - UT-managed/contracted AI platforms
Examples: UT Verse, Microsoft Copilot for M365, UT AI Hub (aihub.tennessee.edu)
These must be covered by a formal UT agreement that includes UT-standard security, AI, privacy, and data-handling provisions. A contract addendum may be necessary for changes to existing agreements to add current standardized language. - UT-managed/contracted AI services with web search disabled
This is a subset of UT-managed/contracted services configured to prevent web searching and external data sharing. - AI features native to purchased software solutions
AI features or functionality that are built into, bundled with, or integrated as a core component of a commercially licensed software application. These AI capabilities are delivered as part of the software vendor’s platform and operate within the terms of the existing purchase or licensing agreement. - Locally installed offline models
A fully offline model (no internet access, stored on UT-owned equipment) may technically support higher classifications, but use of the application should be discussed with the local IT department. - Developmental protocols
The development, customization, or integration of any AI application, including locally installed or internally developed large language models, is subject to the same University of Tennessee data classification requirements and institutional policies, and does not exempt the application or its users from compliance obligations based on deployment method or hosting location.