Map AI use and information flows
- Identify the purpose, business owner, users and connected data sources for each selected use case
- Review what information enters the service and available provider retention or training settings
- Record sensitive information, third-party dependencies and evidence we cannot access
