Evaluation process
AI coding tools used for government projects must satisfy the Requirements for AI tool clearance.
To maintain security and compliance standards, we follow a structured evaluation process before approving AI-assisted coding tools for use with code classified as RESTRICTED, CONFIDENTIAL (CLOUD-ELIGIBLE), or CONFIDENTIAL.
You may use any AI tool for code classified as OFFICIAL (OPEN) or OFFICIAL (CLOSED) without going through this evaluation process.
| Stage | Process | Description |
|---|---|---|
| 1 | Market evaluation (ongoing) | We continuously scan the market for AI-assisted coding tools that may be suitable candidates. |
| 2 | In-house assessment | Internal teams evaluate each tool’s technical specifications, security posture, and overall suitability. |
| 3 | Pre-trial discussions | We engage with product providers to obtain trial licences. |
| 4 | Trial period | A limited group of users tests the tool to assess its effectiveness, security, and user experience. |
| 5 | Decision period | Based on trial feedback, we determine whether the tool meets security and compliance standards for use with RESTRICTED, CONFIDENTIAL (CLOUD-ELIGIBLE), or CONFIDENTIAL code. |
| 6 | Clearance review | The tool undergoes a final legal and technical policy review to ensure full compliance with security and regulatory requirements. |
| 7 | Tool availability | If all requirements are met, the tool is formally approved and made available for use with RESTRICTED, CONFIDENTIAL (CLOUD-ELIGIBLE), and/or CONFIDENTIAL code. |
