Where AI is actually happening across Council — surfaced from five passive channels, not just self-reports.
Other governance tools register what you already know. AIG Sentinel discovers what you don't — Copilot Studio apps shipped by staff, vendor AI features turned on without notice, consumer LLMs accessed via browser, AI clauses tucked into contract renewals. Every detection lands here with a recommended action.
Microsoft Purview audit feed. Detects Copilot usage, Power Automate AI flows, M365 Forms AI features, Stream summarisation, Copilot Studio apps.
Council SIEM feed. Flags outbound traffic to consumer AI endpoints (chat.openai.com, claude.ai, gemini.google.com, perplexity.ai, copilot.microsoft.com).
Maintained registry of AI capability shipped by your licensed vendors (M365, TechnologyOne, SirsiDynix, AWS, Routific, etc.). Weekly diff against vendor release notes.
NLP scan of executed contracts in TechnologyOne / SharePoint. Surfaces clauses mentioning AI, ML, automated decision-making, or generative models that weren't separately registered.
Branded surveys emailed to Department Heads, ICT, Privacy, Risk and Records. Responses parse to candidate use cases.
TechnologyOne ERP v25.3 shipped a 'Smart Insights' AI summariser feature on 2026-05-19. 12 staff have accessed it via the F&R module. Not yet in Council's AI inventory.
4 distinct users in the Planning team accessed claude.ai during business hours over the last 14 days. Median session: 23 minutes. Aggregate: 78 sessions.
Flow 'AP-InvoiceCapture-v2' uses AI Builder Form Processing model. Owner: a.tan@. Runs ~140 times/week. Connects to TechnologyOne AP module.
8 users across ICT, Comms and CX accessed perplexity.ai 2026-05-22 to 2026-05-24. Coincides with 'AI research' team upskilling session (per L&D calendar).
SmartSheet enterprise contract renewal executed 2026-05-22 includes new section 4.7 'AI Assistant' permitting customer data use for response generation. Not flagged at procurement.
Three Forms surveys created by L&D have 'AI-generated questions' toggle enabled. Survey subjects: staff wellbeing, training feedback, leadership.
| Detected | Discovery | Source | Status | Linked |
|---|---|---|---|---|
| 2026-05-25 16:42 | Copilot Studio app deployed by Marcus Webb Power Platform admin centre shows a new Copilot Studio app 'Planning Enquiries Triage v0.3' published 2026-05-25 by m.webb@. Connected to SharePoint sites: 'DCP-Library', 'LEP-Maps'. | M365 Audit Log | Confirmed — staged at G0 | — |
| 2026-05-22 10:08 | Self-reported ChatGPT personal account use — 47 staff Q-2026-04 responses confirmed 47 staff using personal ChatGPT accounts for work tasks. Already known signal; auto-created UC-004. | Team questionnaires | Confirmed — staged at G0 | UC-004 |
| 2026-05-19 17:08 | M365 Stream — meeting summariser usage 14 users have transcribed and summarised Teams meetings via M365 Stream's AI summariser. All sit within the Copilot-licensed cohort under UC-001. | M365 Audit Log | Already registered | UC-001 |
| 2026-05-18 11:42 | SirsiDynix BLUEcloud — catalogue auto-tagging via ML SirsiDynix release notes for BLUEcloud v9.4 (shipped 2026-05-12) describe ML-driven catalogue subject-tag suggestions. Library Services confirmed not actively used yet. | Vendor AI feature registry | Confirmed — staged at G0 | — |
| 2026-05-15 09:18 | chat.openai.com — 12 users (Customer Experience) Twelve distinct users in CX accessed chat.openai.com over a 21-day window. Already triangulated against UC-004 questionnaire responses. | DNS / Proxy log | Already registered | UC-004 |
| 2026-05-14 13:55 | openai.com domain — vendor-side false positive Three users accessed yourdomain.com which happens to use OpenAI as a chatbot widget on a third-party site. No data exchange initiated by Council staff. | DNS / Proxy log | Dismissed (false positive) | — |
| 2026-05-12 10:00 | Routific — already in inventory Routific (the waste-route optimisation vendor) is on the vendor registry but already registered as UC-011. Confirmed via routine cross-check. | Vendor AI feature registry | Already registered | UC-011 |
| 2026-05-11 16:42 | TechnologyOne v22 — legacy 'intelligent routing' clause Contract NLP flagged the phrase 'intelligent routing' in a 2024 TechnologyOne renewal. On review, this is algorithmic / rule-based, not ML. | Contract NLP scan | Dismissed (false positive) | — |