Source: https://atomic-works-test.docs-staging.pageloop.ai/data-library/ai-systems/glossary

# Glossary

# Glossary

This glossary explains commonly used terms in the AI Systems module in Sprinto.

The definitions below help organisations better understand AI governance workflows, compliance concepts, risk assessments, due diligence activities, Shadow AI monitoring, and remediation processes used throughout the AI Systems module.

TermDefinitionAI ModelThe underlying machine learning or generative AI model used by an AI system, such as GPT-4, Claude, Gemini, or self-hosted models.AI SystemAn internal or third-party AI application, platform, service, or workflow managed within Sprinto.AI System LifecycleThe governance lifecycle followed by AI systems, including discovery, inventory management, risk assessment, due diligence, monitoring, remediation, and periodic reviews.Compliance FrameworkA regulatory or governance standard used to guide AI governance workflows, such as ISO 42001, EU AI Act, or NIST AI RMF.Critical RiskA high-priority AI risk classification assigned to AI systems requiring additional governance oversight or remediation.Custom FieldAn organisation-specific metadata field added to AI systems for governance or operational tracking.Due DiligenceA governance and security review workflow used to assess the compliance and security posture of AI systems or AI vendors.Dynamic VariablesReusable placeholders used within document request templates, such as {{vendor\_name}} or {{internal\_business\_contact}}.FindingA governance observation, issue, compliance gap, or security concern identified during AI governance reviews.GeographyThe deployment region or data processing location associated with an AI system.Governance WorkflowA structured process used to manage AI systems, governance reviews, risk assessments, due diligence activities, and remediation tracking.Internal AI SystemAn AI system developed, hosted, or managed internally by the organisation.MonitorA governance tracking workflow or compliance activity associated with an AI system.Multiuser FieldA custom field type that allows multiple users to be associated with an AI system or governance workflow\.PHIProtected health information associated with individuals.PIIPersonally identifiable information that can identify an individual directly or indirectly.QuestionnaireA structured assessment form used during AI governance and due diligence workflows.Remediation TaskAn operational or governance action assigned to resolve a finding, risk, or compliance concern.Risk FactorA scoring criterion used during AI risk assessments.Risk LevelA classification assigned to AI systems based on calculated risk scores.Risk ThresholdA configured score range used to determine the assigned AI risk level.Security QuestionnaireA questionnaire used to assess the security and governance posture of AI vendors or AI systems.Shadow AIAI tools or services being used within the organisation outside approved governance workflows.StakeholderA user, team, or business function associated with an AI system.Third-party AI SystemAn externally provided AI application, platform, or service used by the organisation.VendorAn external organisation that provides an AI system or AI-enabled service.ViolationAn AI-related policy breach, governance issue, or sensitive data exposure event detected by Sprinto.Violation SeverityThe priority classification assigned to a violation.

---

## Related Information

- [AI Systems Overview](./)
- [How AI Systems Work](how-ai-systems-work.md)
- [Assess AI System Risk](dashboard-actions/assess-ai-system-risk.md)
- [Perform AI System Due Diligence](dashboard-actions/perform-ai-system-due-diligence.md)
- [Discover and Govern Shadow AI](dashboard-actions/discover-and-govern-shadow-ai.md)
- [Monitor AI System Violations](dashboard-actions/monitor-ai-system-violations.md)