> For the complete documentation index, see [llms.txt](https://docs.sprinto.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sprinto.com/data-library/ai-systems/glossary.md).

# Glossary

This glossary explains commonly used terms in the AI Systems module in Sprinto.

The definitions below help organisations better understand AI governance workflows, compliance concepts, risk assessments, due diligence activities, Shadow AI monitoring, and remediation processes used throughout the AI Systems module.

<table><thead><tr><th width="215.91796875">Term</th><th>Definition</th></tr></thead><tbody><tr><td>AI Model</td><td>The underlying machine learning or generative AI model used by an AI system, such as GPT-4, Claude, Gemini, or self-hosted models.</td></tr><tr><td>AI System</td><td>An internal or third-party AI application, platform, service, or workflow managed within Sprinto.</td></tr><tr><td>AI System Lifecycle</td><td>The governance lifecycle followed by AI systems, including discovery, inventory management, risk assessment, due diligence, monitoring, remediation, and periodic reviews.</td></tr><tr><td>Compliance Framework</td><td>A regulatory or governance standard used to guide AI governance workflows, such as ISO 42001, EU AI Act, or NIST AI RMF.</td></tr><tr><td>Critical Risk</td><td>A high-priority AI risk classification assigned to AI systems requiring additional governance oversight or remediation.</td></tr><tr><td>Custom Field</td><td>An organisation-specific metadata field added to AI systems for governance or operational tracking.</td></tr><tr><td>Due Diligence</td><td>A governance and security review workflow used to assess the compliance and security posture of AI systems or AI vendors.</td></tr><tr><td>Dynamic Variables</td><td>Reusable placeholders used within document request templates, such as {{vendor_name}} or {{internal_business_contact}}.</td></tr><tr><td>Finding</td><td>A governance observation, issue, compliance gap, or security concern identified during AI governance reviews.</td></tr><tr><td>Geography</td><td>The deployment region or data processing location associated with an AI system.</td></tr><tr><td>Governance Workflow</td><td>A structured process used to manage AI systems, governance reviews, risk assessments, due diligence activities, and remediation tracking.</td></tr><tr><td>Internal AI System</td><td>An AI system developed, hosted, or managed internally by the organisation.</td></tr><tr><td>Monitor</td><td>A governance tracking workflow or compliance activity associated with an AI system.</td></tr><tr><td>Multiuser Field</td><td>A custom field type that allows multiple users to be associated with an AI system or governance workflow.</td></tr><tr><td>PHI</td><td>Protected health information associated with individuals.</td></tr><tr><td>PII</td><td>Personally identifiable information that can identify an individual directly or indirectly.</td></tr><tr><td>Questionnaire</td><td>A structured assessment form used during AI governance and due diligence workflows.</td></tr><tr><td>Remediation Task</td><td>An operational or governance action assigned to resolve a finding, risk, or compliance concern.</td></tr><tr><td>Risk Factor</td><td>A scoring criterion used during AI risk assessments.</td></tr><tr><td>Risk Level</td><td>A classification assigned to AI systems based on calculated risk scores.</td></tr><tr><td>Risk Threshold</td><td>A configured score range used to determine the assigned AI risk level.</td></tr><tr><td>Security Questionnaire</td><td>A questionnaire used to assess the security and governance posture of AI vendors or AI systems.</td></tr><tr><td>Shadow AI</td><td>AI tools or services being used within the organisation outside approved governance workflows.</td></tr><tr><td>Stakeholder</td><td>A user, team, or business function associated with an AI system.</td></tr><tr><td>Third-party AI System</td><td>An externally provided AI application, platform, or service used by the organisation.</td></tr><tr><td>Vendor</td><td>An external organisation that provides an AI system or AI-enabled service.</td></tr><tr><td>Violation</td><td>An AI-related policy breach, governance issue, or sensitive data exposure event detected by Sprinto.</td></tr><tr><td>Violation Severity</td><td>The priority classification assigned to a violation.</td></tr></tbody></table>

***

## Related Information

* [AI Systems Overview](/data-library/ai-systems.md)
* [How AI Systems Work](/data-library/ai-systems/how-ai-systems-work.md)
* [Assess AI System Risk](/data-library/ai-systems/dashboard-actions/assess-ai-system-risk.md)
* [Perform AI System Due Diligence](/data-library/ai-systems/dashboard-actions/perform-ai-system-due-diligence.md)
* [Discover and Govern Shadow AI](/data-library/ai-systems/dashboard-actions/discover-and-govern-shadow-ai.md)
* [Monitor AI System Violations](/data-library/ai-systems/dashboard-actions/monitor-ai-system-violations.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sprinto.com/data-library/ai-systems/glossary.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.