Skip to main content

University of Houston System

  1. UH System
  2. Offices
  3. Information Security
  4. Cybersecurity Resources and Support
  5. Usage of Artificial Intelligence (AI) at UHS

Offices

Usage of Artificial Intelligence (AI) at UHS

From day to day tasks, to research and teaching, Artificial Intelligence (AI) is expected to be the next great change agent to how people and companies operate.  The University of Houston System is committed to ensuring that all constituents can use AI tools such as Microsoft Copilot, ChatGPT, or Google Gemini in a safe and responsible manner.  Please note that this security and privacy guidance may evolve as circumstances change and/or the System develops further policy regarding the use of AI.

Security & privacy guidelines regarding AI tools

UHS currently is considering the necessity for an official AI policy.  During this process, please use these privacy and security guidelines, or contact security@uh.edu should you have any questions, comments or concerns.

Prohibited use

Do not use confidential, sensitive, or mission critical data (Level 1 data) or protected information (Level 2 data) with AI tools.  For more information on what constitutes Level 1, Level 2 or Level 3 data please see SAM 07.A.08 – Data Classification and Protection.

Allowable use

You may use AI tools freely when using non-university or public information or creating new content through the use of the tools.

Avoid data sharing

Sharing information with AI models such as ChatGPT could cause data to be used by the tool for future use, or potentially expose data to unauthorized individuals. 

Check accuracy

AI models can “make things up” or provide biased information, so it is critical that you verify any answers an AI tool such as ChatGPT provides.  Many tools lack contemporary context to questions they answer.

Data privacy

Consider how you share data with others. Be mindful that any information you make available to others or to the general public could be used for AI training and content generation.

Academic use of AI tools

Please check with the provost’s office at your System university regarding specific use cases of AI tools in your curriculum.

UHS Tip

  • Consider increasing your knowledge by improving your AI literacy through online training suchas courses on Linkedin Learning
  • If you would like advanced Copilot features, contact your IT department for a Copilot Pro licenses (monthly recurring cost applicable).  For a list of additional features, see here.
  • UHS faculty/staff can use Microsoft 365 Copilot Chat with their UHS M365 account
  • Review your OneDrive/Sharepoint files to ensure that you are not oversharing

AI Agents

AI agents are (semi)autonomous software entities that are either homegrown or customized by you.  This technology is still emerging, but please follow these guidelines when developing/deploying AI agents:

  • Enforce access control - AI agents should have their own credentials to access systems and resources, rather than reuse credentials that you use to access these systems
  • Determine agency - Ensure that agents can only autonomously take actions they are supposed to, without introducing too much business risk
  • Multi agents - Carefully consider the deployment location of AI agents if they will be collaborating, especially how they interact and if they could end up with more access or agency than they should have

UHS Tip

UHS faculty/staff can explore using Microsoft Copilot Agents to help them become more productive.  If you use Microsoft Copilot with your UHS M365 account, enterprise data protection will protect the university's data.  For more information check out the Microsoft's "Get started with agents in Microsoft 365 Copilot."

Hosting Your Own Model

If you would like to host your own LLM there are several things to keep in mind:

  • Work with your local IT department or ISO, and review any implementation with UHS Information Security
  • Clearly define the purpose for the use of the model
  • Clearly define who has access to the model
  • Ensure that you get the correct model (verify checksums/hashes prior to installing the model) and that the model is not prohibited via the TX DIR Prohibited Technology & Covered Applications list (i.e. Deepseek)
  • Decide if real data has to be used or if synthetic data would be sufficient
  • If reusing the model for a different purpose, reset it back to the foundational model as residual training data may remain and may lead to unintended consequences

Additional Resources

Some additional resources that may be helpful as you explore the topic of AI further: