Appropriate Use of AI Services & U-M Policy

Stay informed about the correct policies, standards, and guidance when using AI services.

General Responsibilities

Responsible use of AI services entails protecting the university and its community members from harm. It involves:

  • Complying with applicable laws, regulations, and U-M policies.
  • Respecting the intended use and shared nature of AI services.
  • Respecting and protecting the privacy of others.
  • Keeping login credentials safe against unauthorized access and never sharing them with others.
Supporting Policies, Standards, and Guidance

When Handling University Data

University of Michigan data is a strategic asset and we all have a shared responsibility for protecting it. When working with university data in AI platforms:

  • Use approved ITS AI Services.
  • Only use university data classified as Low with AI services that do not have a contract or data agreement with U-M.
Supporting Policies, Standards, and Guidance

To Generate Computer Code

AI services offer powerful solutions for generating computer code. When taking advantage of these solutions:

  • Ensure AI-generated computer code is always reviewed by a human.
  • Conduct code reviews with professionally trained peers for all new or significantly changed applications, particularly those that maintain, process, transmit, or store data classified as Restricted or High.
Supporting Policies, Standards, and Guidance

For Teaching, Learning, and Knowledge Production

When using AI services for teaching, learning and knowledge production, U-M community members must:

  • Align with the university’s principles for honesty, candor, openness, and integrity in scholarship and research, including appropriate disclosure and citation where AI has been used.
  • Understand the university’s intellectual property and copyright framework.
Supporting Policies, Standards, and Guidance

Procurement of AI Services

To ensure service quality, fiscal responsibility, and alignment with the university's mission and values, third-party AI services should be procured with care:

  • AI services for institutional use should not be purchased with a personal credit or debit card.
  • AI services that will be used with institutional data classified as Moderate, High, or Restricted should only be purchased by Procurement Services.
  • After the termination or expiration of a contract for AI services, purchasing units/departments should ensure the appropriate handling and protection of any university data in the vendor’s control.
Supporting Policies, Standards, and Guidance