Approved AI Tooling
Approved Tools
Summary
AI tools may be used only as authorised in the Approved Tooling Register.
Standards
- A person MUST NOT use an AI tool unless it is listed in the Approved Tooling Register.
std-ai-approved-tools-01 - A person MUST NOT submit PII or PHI to an AI tool unless the register marks it as allowed and the submission is not prohibited by Prompt Data Handling.
std-ai-approved-tools-02
Approved Tooling Register
| Tool | Capability Category | PII or PHI Submission Authorised |
|---|---|---|
| GitHub Copilot | AI-Assisted Development Tool | ❌ |
| GitHub Copilot Code Review | Code Review Tool | ❌ |
| AWS Kiro | Spec-Driven Development Agent | ❌ |
| Datadog Bits AI SRE | Observability & Incident Agent | ❌ |
Related Standards
Implements These Principles
Licensing & Provisioning
Summary
AI tooling access uses an individually attributable, organisation-provisioned licence tied to an organisational identity.
Standards
- AI tools MUST be used only under licences provisioned and administered by Health New Zealand and tied to the user's organisational identity.
std-ai-licensing-provisioning-01 - Personal, free-tier, trial, or other independently obtained accounts MUST NOT be used, even where the tool is on the Approved Tooling Register.
std-ai-licensing-provisioning-02