Secure AI Tools
Approved for HIPAA/FERPA data
Specific tools have been reviewed and approved for use with sensitive information, including data covered by HIPAA or FERPA.
WashU Generative AI Environment
Tools in the WashU Generative AI Environment have been specifically reviewed and approved for use with sensitive information, including data covered by HIPAA or FERPA. Currently, the environment includes:
WashU ChatGPT Beta
Utilizes OpenAI’s latest ChatGPT-4o large language model and is compliant for use with sensitive data, including information protected under HIPAA and FERPA.
API access to AI endpoints
API access to AI endpoints within the secure sandbox is available for use at cost, enabling customization, multiple LLMs, programmatic access, and more.
Other secure tools
In addition to the WashU Generative AI Environment, tools like the Zoom AI Companion have also been deemed secure for use with sensitive data, including information protected under HIPAA and FERPA.
This landscape continues to evolve quickly. A full list of approved AI tools and their security designation is provided at it.wustl.edu/ai, as well as information about reviewing and procuring AI tools.
Standard AI tools
Not for use with HIPAA/FERPA data
Visit it.wustl.edu/ai for a current list of WashU IT-approved generative AI tools.
Many additional generative AI tools and product enhancements are available in the marketplace. In line with university procurement policy for IT hardware and software, vendor generative AI tools must be assessed for risk by WashU’s Office of Information Security prior to use. Learn more about procuring AI tools.
Remember that standard generative AI tools are not secure, even when used on an otherwise secure machine or network. Take care to safeguard any sensitive information, especially data covered by HIPAA and FERPA, and only use sensitive data with secure AI tools as outlined above.
Anything entered into standard AI tools is immediately out of the user’s control. It may be used to further train the large language model (LLM) behind the tool and could become part of a response generated for another user. Always think carefully about the nature, source and ownership of any information used with AI.