AI System Inventory

SL-09

Every system that can process, infer from or generate output using personal data — generative platforms, enterprise copilots, agentic frameworks, embedded features in third-party tools, and the analytics models nobody thinks of as AI.

DischargesS.4 S.8(4)S.16 S.10

1 systems train on departmental data

Scheme eligibility scoring model. Training is processing, and inferred or derived attributes are personal data too. Both need a declared purpose and a lawful ground — a model that learned from a record does not forget it when the record is erased.

AI systems

Sanctioned

Unsanctioned or blocked

Outside India

Reaching children's data

10 records

						Data reached
Departmental AI Assistant Azure OpenAI (Central India)	Hosted AI platform	monitored	Central India	412	18.6 K284 blocked	PersonalChildren	Critical
Microsoft 365 Copilot Microsoft	Enterprise copilot	sanctioned	India region	268	9.42 K61 blocked	Personal	High
Scheme eligibility scoring model In-house	Analytics / ML model	monitored	State Data Centre	14	0	PersonalTrains on our data	Critical
ChatGPT (consumer) OpenAI	Shadow AI	unsanctioned	United States	86	1.94 K1.94 K blocked	PersonalChildren	Critical
Gemini (consumer) Google	Shadow AI	blocked	United States	34	620620 blocked	Personal	Critical
Grievance triage agent (pilot) In-house · LangGraph	Agentic framework	restricted	State Data Centre	8	3.18 K412 blocked	Personal	High
GitHub Copilot GitHub	AI development tool	sanctioned	United States	42	24.8 K18 blocked		Medium
Embedded summarisation in the case tool Helio Ltd	Embedded AI feature	monitored	Singapore	118	6.24 K96 blocked	Personal	Critical
Claude (consumer) Anthropic	Shadow AI	unsanctioned	United States	21	340340 blocked	Personal	High
Local translation model In-house · IndicTrans	Custom LLM	sanctioned	State Data Centre	96	14.2 K4 blocked	Personal	Low