Mississippi State University provides a secure environment for AI adoption. To protect institutional data, only approved platforms may be used when handling MSU information.
This article consolidates MSU’s day-to-day AI data security guidance. For the full Information Security Program, see infosecurity.msstate.edu.
Approved tools
- Microsoft 365 Apps, including Copilot (login with netid@msstate.edu)
- Gemini (login with netid@msstate.edu)
- NotebookLM (login with netid@msstate.edu)
- Claude (request and purchase MSU enterprise account, login with netid@msstate.edu)
- Webex AI Assistant
All other AI tools should be treated as public or open platforms and are not suitable for MSU data designated as Moderate, High-Risk, or Regulated. Examples of public or open platforms include:
- Grok, Perplexity, other
- Cloud environments (AWS, Nvidia, Google CoLab, or others)
Do not use READ.AI for recording and transcription of meetings. Use MS Teams or Webex for this purpose. If you have used Read.AI and can’t clear it from your computer, submit a ticket to ITS for help.
Know your data — classification and protection
High-Risk / Regulated Data
- Examples: FERPA, HIPAA, GLBA, or other highly controlled or regulated data.
- Requirement: Request approval before using any AI platform with personally identifiable information (PII) that falls into the FERPA, HIPAA, or similar category.
- Restriction: Use completely de-identified information unless otherwise approved.
- Example: You should not upload student work with names to an AI tool to help with grading. You should not upload employee names and salaries for analysis.
Moderate-Risk Data
- Examples: Data accessible only by logging in with your MSU NetID.
- Requirement: Use only in MSU enterprise-licensed tools.
- Restriction: Requires approval before use in any non-MSU platform.
- Example: You may use Copilot, Gemini, or Claude (must be logged in with NetID) to summarize internal financial documents or internal communications. You may use Teams features to record and transcribe meetings.
Low-Risk / Public Data
- Examples: Data already available to the public.
- Requirement: May be used in public tools; adjust tool settings to prevent training of large language models on your input.
Website AI chatbots
All public-facing AI chat assistants should be approved before development and again before deployment. This includes those created with approved tools such as Copilot, Claude or Gemini.
Purchasing or using non-MSU AI software
If you are considering purchasing or using a free software package that uses AI technology within the package, we ask that you seek approval.
When you are uncertain
It is impossible to anticipate every possible use. If you are uncertain, contact the Chief Information Security Officer at security@msstate.edu.