Spaces:
No application file
No application file
| title: YDC_AIGOV | |
| sdk: gradio | |
| emoji: 📚 | |
| colorFrom: blue | |
| colorTo: yellow | |
| short_description: AI Gov Agents to Improve Shadow AI | |
| sdk_version: 5.20.0 | |
| --- | |
| ## Overview of the YDC_AIGOV Platform | |
| The YDC_AIGOV platform employs multiple AI agents to support Shadow AI Governance of applications with embedded AI. | |
| ### Problem We Are Trying to Solve | |
| The primary challenge tackled by YDC_AIGOV is a lack of transparency and accessibility in AI policies associated with various applications. Key issues include: | |
| - Difficulty in Locating AI Policy URLs: Users often struggle to find the privacy policies relevant to the applications they use (AI policies are often embedded with company privacy policies). | |
| - Understanding AI Model Integrations: Many users are unaware if the applications they engage with contain embedded AI models and if their data is utilized in training these models. | |
| - Clarifying Opt-Out Options: There is often confusion regarding whether users have the option to opt-out of having their data used for AI training purposes. | |
| - Streamlining Compliance: Organizations face challenges in ensuring compliance with data governance regulations due to the complex nature of policy trails. | |
| The YDC_AIGOV agents streamlines this process, making it easier for both users and organizations to navigate and understand the policies surrounding AI technologies. | |
| ### Agent Architecture | |
| Agents used are as below : | |
| 1. **Fuzzy Matching Agent** | |
| Transforms the entered application name into the correct app name by correcting spelling errors, removing special characters, and addressing other inconsistencies. | |
| 2. **Embedded AI Detector Agent** | |
| Search the internet and fetch relevant data to determine if the application uses AI. | |
| 3. **Policy Finder Agent** | |
| AI Agent from CrewAI to find the privacy policy URL. | |
| 4. **Policy Analyzer Agent** | |
| Provides answers to the following questions: | |
| - Is user data used for AI/ML training? | |
| - Is there an opt-out option for AI/ML training? | |
| 5. **Policy Decision Agent** | |
| Makes final determinations on AI policies based on extracted insights from privacy policy text. | |
| 6. **Risk Classifier Agent** | |
| Classifies an input applications as High risk, others and prohibited along with its rationale. | |
| ### The processed data is then sent to AI governance platforms like Collibra and ServiceNow, where further workflows are executed. | |
| Agents used for Creating application, AI Use Case and Assessments are as follow - | |
| - **A. createApp_Agent:** Applications are created in platforms based on the CSV input using REST API. | |
| - **B. createAIUseCases_Agent:** If embedded AI is “Yes,” the corresponding AI use cases are auto-created. | |
| - **C. conductAIRiskAssessment_Agent:** Risk assessments are performed automatically for AI use cases, particularly if Embedded AI is “Yes” and Data specifically excluded from | |
| AI training is “No” | |
| ### Risks | |
| **Hallucinations:** AI agents might generate incorrect or fabricated information when the required data is not available or poorly structured. | |
| **Incomplete Data:** Web scraping might miss or misinterpret content due to website restrictions or dynamic loading. | |
| **Bias and Misclassification:** AI may misclassify the presence of opt-out options or embedded AI due to ambiguous language. | |
| #### Agent-Specific Risks: | |
| 1. **Fuzzy Matching Agent** | |
| Incorrect or incomplete app name matches due to imperfect algorithms and variations in spelling or formatting. | |
| 2. **Embedded AI Detector Agent** | |
| Fetches irrelevant or outdated information. | |
| 3. **Policy Finder Agent** | |
| Fails to find or retrieve incorrect URLs. | |
| 4. **Policy Analyzer** | |
| Misinterprets policy text due to ambiguous language. | |
| 5. **Policy Decision Agent** | |
| Hallucinates answers when information is incomplete or ambiguous. | |
| 6. **EU AI Act Classifier Agent** | |
| Often targets specific keywords from the description, which may give incorrect responses in some cases. | |
| 7. **Risk Dimension Agent** | |
| Fails to determine the correct risk dimension, leading to misclassified assessments. | |
| 8. **Risk Dimension AI UseCase Agent** | |
| Retrieves outdated or misinterpreted AI risk and Responsible AI policy data. | |
| 9. **Risk Dimension AI Vendor Agent** | |
| Extracts biased, incomplete, or misleading vendor-related AI risk information. | |
| ### Accuracy Metrics | |
|  | |
| Check out detailed [blog](https://yourdataconnect.com/blogs/ydc_aigov-shadow-ai-governance-agents/) for in-depth information | |
| --- | |
| You can learn more about us [here](https://yourdataconnect.com/). |