AI Tool Security Classification Framework

Last Updated: Jan 2026

This framework helps faculty and staff choose AI tools appropriate for different types of work. The goal is simple: use the right tool for the job, and protect sensitive information.

You don't need to become a security expert! The goal is to help you match your chosen task to the right tier.

Quick Reference Chart

Tier	Security Level	Use For	Data Training?
Level 1 — Avoid	Significant risks	Do not use for institutional work	Yes + other concerns
Level 2 — Caution	Basic	Public information only	Yes (default)
Level 3 — Standard	Enhanced	Most institutional work	No (if configured)
Level 4 — Recommended	Enterprise-grade	All work including sensitive data	No (by policy)

Decision Matrix: Which Tier Should I Use?

Ask yourself these questions:

Question 1: Does this involve student information?

Yes → Level 4 only (or don't use AI)
No → Continue to Question 2

Question 2: Does this involve personnel, budget, or strategic information?

Yes → Level 4 only
No → Continue to Question 3

Question 3: Would I be comfortable if this information became public?

No → Level 3 or Level 4
Yes → Continue to Question 4

Quick Reference Chart

Decision Matrix: Which Tier Should I Use?

Question 1: Does this involve student information?

Question 2: Does this involve personnel, budget, or strategic information?

Question 3: Would I be comfortable if this information became public?

Question 4: Am I just brainstorming or working with general knowledge?