AI cases
Investigate and document an incident affecting an AI asset, such as a suspected security breach, data exposure, or policy violation, using a structured case record.
An AI case documents an incident that requires investigation, such as a suspected security breach, a data exposure, or a policy violation involving an AI asset. A case moves through breach analysis, root cause analysis, and remediation as the investigation progresses.
Case lifecycle
An AI steward or asset owner reports a case to document an incident, such as a suspected breach, data exposure, or policy violation. AI Control Tower assigns a case analyst, who triages and investigates the incident to determine whether a breach occurred. The Reporting status field is set automatically based on the regulations associated with the case.
Once the case analyst completes the root cause analysis, the Primary cause and Primary consequence fields populate from that analysis. The case analyst records whether remediation measures have been taken and documents any preventive measures. The case then moves through a post-case review before closing, or it can be canceled if no further action is needed.
Where AI cases appear
AI cases appear on the Cases sub-tab of the Team, Assigned to you, Unassigned, and Submitted by you tabs in Activity Center, depending on assignment.
--- title: AI cases description: Investigate and document an incident affecting an AI asset, such as a suspected security breach, data exposure, or policy violation, using a structured case record. locale: en-US canonical_url: https://www.servicenow.com/docs/r/intelligent-experiences/ac-ai-cases.html release: brazil topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 keywords: [AI case, breach, root cause analysis] breadcrumb: [Managing tasks and approvals, Address action items, AI Control Tower, Establishing AI governance, Enable AI Experiences] --- # AI cases Investigate and document an incident affecting an AI asset, such as a suspected security breach, data exposure, or policy violation, using a structured case record. An AI case documents an incident that requires investigation, such as a suspected security breach, a data exposure, or a policy violation involving an AI asset. A case moves through breach analysis, root cause analysis, and remediation as the investigation progresses. ## Case lifecycle An AI steward or asset owner reports a case to document an incident, such as a suspected breach, data exposure, or policy violation. AI Control Tower assigns a case analyst, who triages and investigates the incident to determine whether a breach occurred. The **Reporting status** field is set automatically based on the regulations associated with the case. Once the case analyst completes the root cause analysis, the **Primary cause** and **Primary consequence** fields populate from that analysis. The case analyst records whether remediation measures have been taken and documents any preventive measures. The case then moves through a post-case review before closing, or it can be canceled if no further action is needed. ## Where AI cases appear AI cases appear on the **Cases** sub-tab of the **Team**, **Assigned to you**, **Unassigned**, and **Submitted by you** tabs in Activity Center, depending on assignment.
| title | AI cases |
| description | Investigate and document an incident affecting an AI asset, such as a suspected security breach, data exposure, or policy violation, using a structured case record. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/intelligent-experiences/ac-ai-cases.html |
| release | brazil |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| keywords | AI casebreachroot cause analysis |
| breadcrumb | Managing tasks and approvalsAddress action itemsAI Control TowerEstablishing AI governanceEnable AI Experiences |