An AI use case is any workflow where AI is applied to a business task — a customer service chatbot, a code review assistant, a document summarisation pipeline. Kovral's Use Cases module is the registry that governs all of them.
A searchable catalogue of every AI use case in your organisation: name, description, business owner, AI models used, data categories processed, deployment status, and compliance status.
New AI use cases go through a configurable approval workflow (risk assessment → security review → privacy review → business approval). Kovral tracks the status and sends reminders.
For each use case, Kovral maps the flow of data through the AI system: what data enters the prompt, what the model can access, what data leaves in the response, and where it goes next.
Each use case is mapped to the relevant regulatory requirements (GDPR Article 22 for automated decisions, EU AI Act risk tier, HIPAA safe harbours). Gaps trigger remediation tasks.
The EU AI Act requires organisations to classify AI systems by risk tier and maintain documentation for each. Kovral automates this classification and documentation process.
Kovral evaluates each use case against the EU AI Act's risk criteria and assigns a tier: Unacceptable Risk, High Risk, Limited Risk, or Minimal Risk.
For High-Risk systems, Kovral generates the required technical documentation: system description, intended purpose, performance metrics, and human oversight measures.
Kovral tracks which high-risk systems require a conformity assessment and maintains the evidence needed to complete it.
Registered high-risk systems are continuously monitored post-deployment. Significant changes to system behaviour trigger a re-evaluation of the risk classification.
