University of Missouri

In general, most free generative AI tools keep the prompts, data and other information you provide in return for use of the tool. Any information you provide to these models and the results they return may become public and are available for the AI tool to use and iterate on for all users, including those outside Mizzou. Understanding your tools, the data you are working with and how these two fit together helps you use AI responsibly.

The university supports responsible use of AI tools, though there are important considerations to keep in mind when using these tools, including information security, data privacy, compliance, intellectual property/copyright implications, academic integrity and bias.

Guidelines

• Use university-approved and accessed AI tools, such as Microsoft Copilot or Google Gemini, when using university data.
• Different AI tools are approved for different levels of use and data. Follow the university’s Data Classification System when entering information into these tools.
• Before using AI tools, check with your department for any specific policies or guidelines. To meet BPM 12004, IT Compliance must review and approve each software use case.

Academics and AI policies

The MU Faculty Council on University Policy and the Graduate Faculty Senate have approved several policies to help faculty navigate the use of AI in instruction and assessment.

• Faculty resources for AI and the learning environment
• Student resources for AI and the learning environment

The Division of IT evaluates all IT-related products and solutions, including AI-related technologies, under UM policy BPM 12004. Determining the risk level of IT-related free tools and purchases are essential to maintaining an environment capable of supporting university activities in a safe and secure manner.

If you are interested in purchasing or using new AI technology or have questions about how AI could assist you in your roles, reach out to request an IT compliance consultation. Our team can assist you by discussing your needs and reviewing potential AI products for university and regulatory compliance.

More about IT compliance guidelines

MU is actively reviewing the role third-party AI tools play at the university, and part of that review involves examining formal contracts and agreements with AI vendors. There are, however, still many opportunities to experiment and innovate using third-party AI tools at the university.

The university’s guidance on third-party AI usage will adapt and change as we engage in broader institutional review and analysis of these tools. MU encourages its community members to use AI responsibly and review the data inputted into AI systems to ensure it meets the current general guidelines.

Guidelines for Secure AI Use (Third-Party Tools)

1. Third-party AI tools should only be used with institutional data classified as DCL1 (Data Classification Level 1-Public under the university’s Data Classification System).
2. Third-party AI tools like ChatGPT should not be used with sensitive information such as student information regulated by FERPA, human subject research information, health information, HR records, etc.
3. AI-generated code should not be used for institutional IT systems and services, unless approved by Compliance.
4. Open AI’s usage policies disallow the use of its products for many other specific activities. Examples of these activities include, but are not limited to:
   • Illegal activity
   • Generation of hateful, harassing or violent content
   • Generation of malware
   • Activity that has high risk of economic harm
   • Fraudulent or deceptive activity
   • Activity that violates people’s privacy
   • Telling someone that they have or do not have a certain health condition, or providing instructions on how to cure or treat a health condition
   • High risk government decision-making
5. Read the third-party AI’s privacy policy to understand what data it collects. Be aware that some tools may collect sensitive information, such as keystrokes, usernames, passwords and geo-location. Use this review to make an informed decision about whether the tool should be used.