What Data Can I Use?
Approved tools can be used with more types of private data, while custom or non-approved tools need IT partnership before internal/confidential data is used. Before sharing university data with an AI tool, know how it’s classified. Data classifications can include data containing Personally Identifiable Information (PII) — any detail that could identify a specific individual, alone or combined with other data. The matrix below shows which tools are approved for each classification.
Data ClassificationsWhen interacting with AI tools, it’s crucial to understand how your data is handled. BYU-Idaho is committed to protecting your privacy and intellectual property. Data Classifications → |
Public DataData intentionally published for public use on BYU-Idaho websites or the open web and can be accessed without credentials. Examples
News
Maps
Events
Public Websites
Academic Catalogs
Academic Deadlines
|
Internal/Confidential without PIIData you are authorized to access and use for that same purpose that does not contain PII. Examples
Budgets
Policies
Procedures
Survey Data
Meeting Notes
Course Content
Authenticated Websites
|
Internal/Confidential with PIIData you are authorized to access and use for that same purpose that does contain PII. Examples
Names
Photos
Grades
Usernames
I-Numbers
Addresses
Contact Info
Transcripts
Authenticated Websites
|
Restricted DataInformation of the highest sensitivity where inappropriate loss, change, or disclosure could have grave consequences to the University or its students. Examples
SSNs
Bank Info
Passwords
Tax Records
Legal Files
Medical Records
Credit Card Info
|
Public Data |
Internal/Confidential without PII |
Internal/Confidential with PII* |
Restricted Data† |
|
|---|---|---|---|---|
| BYU-Idaho Authorized AI Tools — Chat & Everyday WorkUse these tools for day-to-day tasks with data you have permission to access. Any AI tool not listed is not authorized to use with any data other than public data. | ||||
ChatGPT Edu
Available to employees. Requires a CES ChatGPT Edu license. Personal accounts have no data protections.
|
||||
Microsoft Copilot
Available to employees. Use your BYU-Idaho institutional account. Personal accounts have no data protections.
|
||||
Google Core Services
Available to students and employees. Use your BYU-Idaho institutional account to access Gemini and NotebookLM. Personal accounts have no data protections.
|
||||
| Building with AI — Vibe-Coding & Custom AppsAny AI tool using private data in a custom build requires IT partnership first. | ||||
| BYU-Idaho Authorized Tools ChatGPT Edu, Copilot, Gemini, and NotebookLM — when used to build or vibe-code a custom app or solution. | ||||
| Other AI Tools Anthropic, Perplexity, or other non-authorized tools — whether chatting or building. | ||||
*Please follow the CES Privacy Principles when using any PII. †Using any BYU-Idaho authorized tool with Restricted data is never permitted.
Do I Need IT Support?
When You Can Do It Yourself
-
For you, your team, or your class
-
You own the solution—no IT support needed
-
Use approved AI tools (e.g., CES ChatGPT, BYUI Copilot) to create chats and agents, using only data you’re authorized to access and use for that same purpose
-
Or build a custom / vibe-coded app that uses only public data
-
No additional software, subscriptions, or agreements needed
-
Failure is inconvenient, not critical
When You Must Partner With IT
-
Shared beyond your team, becomes an official BYU-Idaho solution, or is relied on by others to do their work
-
AI solutions that may share private data with other people
-
Custom / vibe-coded apps that access or use private data
-
Requires system integrations (APIs, etc.)
-
Requires new software, subscriptions, or agreements
-
Needs long-term support and availability
My AI Solution Doesn't Require Me to Partner With IT. Is There Anyone Else I Should Consult?
If you are using copyrighted materials, plan to publish or commercialize your work, or have other uncertainties about how the law applies to your custom solution (including "vibe coding"), you should contact the Intellectual Property Officer or Legal Counsel before you start. Ensuring compliance early protects both your work and the university.
ChatGPT Edu
Microsoft Copilot
Google Core Services