---
title: AI cases
description: Investigate and document an incident affecting an AI asset, such as a suspected security breach, data exposure, or policy violation, using a structured case record.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/intelligent-experiences/ac-ai-cases.html
release: australia
topic_type: concept
last_updated: "2026-07-16"
reading_time_minutes: 1
keywords: [AI case, breach, root cause analysis]
breadcrumb: [Managing tasks and approvals, Address action items, AI Control Tower, Enable AI experiences]
---

# AI cases

Investigate and document an incident affecting an AI asset, such as a suspected security breach, data exposure, or policy violation, using a structured case record.

An AI case documents an incident that requires investigation, such as a suspected security breach, a data exposure, or a policy violation involving an AI asset. A case moves through breach analysis, root cause analysis, and remediation as the investigation progresses.

## Case lifecycle

An AI steward or asset owner reports a case to document an incident, such as a suspected breach, data exposure, or policy violation. AI Control Tower assigns a case analyst, who triages and investigates the incident to determine whether a breach occurred. The **Reporting status** field is set automatically based on the regulations associated with the case.

Once the case analyst completes the root cause analysis, the **Primary cause** and **Primary consequence** fields populate from that analysis. The case analyst records whether remediation measures have been taken and documents any preventive measures. The case then moves through a post-case review before closing, or it can be canceled if no further action is needed.

## Where AI cases appear

AI cases appear on the **Cases** sub-tab of the **Team**, **Assigned to you**, **Unassigned**, and **Submitted by you** tabs in Activity Center, depending on assignment.