One tool, three risks
Compliance status belongs to an AI use case, one tool used for one purpose, and not to a tool. One license can produce three unrelated sets of obligations inside the same organization.
One license, three AI use cases
The software is the same in all three AI use cases. The determination, the list of laws that apply to one AI use case with each cited to the provision, is different in each.
The operations team drafts process notes. The use involves no significant personal data, no decision about any individual and no external effect.
Likely outcome: few or no obligations attach. The dated record of that conclusion is the document to keep.
The same assistant reads customer correspondence and produces summaries that route cases. Personal data is involved throughout, and the output influences how a person is handled.
Privacy obligations, transparency expectations and questions about automated handling are now in scope.
The same assistant ranks candidates. This is a consequential decision about identifiable people, in whichever jurisdictions the applicants live.
A different set of obligations: employment AI laws, bias-audit expectations, notice obligations and differences between states.
What this affects
Each practice is established. Each produces a record that cannot answer the question it exists to answer.
The approved-tools list
A list of software the organization has cleared. Clearance was granted for one use, while the license permits all of them. The list does not record which uses have been assessed.
The vendor questionnaire
A vendor questionnaire suits a security review. It does not address what determines regulatory exposure, because the vendor does not know how your departments will use the tool.
The annual review
An AI use case added in March and first reviewed the following January goes unassessed for ten months. The assessment date records the gap.
What this is not. LegisGate produces regulatory intelligence and assessment-preparation materials. Nothing we produce is legal advice, a legal opinion, a certification, or a determination of compliance, and no document we deliver discharges a legal obligation on its own. Your counsel determines sufficiency.
The practical consequence
A tool used for two purposes needs two determinations. LegisGate makes both, each with its own laws, obligations and assessments.
LegisGate therefore counts AI use cases, not tools or people. Your first five AI use cases are free.
Assess the use case, not the license
Each is added to your inventory through the dynamic intake form, a questionnaire that asks only what your earlier answers make relevant, and has its own record in your workspace, with its own recorded approval decision. An approval covering all three does not support any one of them. All three fit within your first five AI use cases, which are free.