---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Governance records

# Governance record types {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Record types under the Governance section of an AI asset's Risk \& Compliance tab in AI Control Tower, used to support governance review.

The Governance section of an AI asset organizes related governance records into four categories: Assessments, Governance, Tasks, and Tracking.  
{#gov-airc-governance-records__table_gov-airc-governance-records__entry__3}

| Category | Record type | Description |
|-|-|-|
| Assessments | AI assessments | General assessments that evaluate an AI asset against governance criteria, such as intended use, risk classification, and compliance requirements. Risk assessments and regulatory risk assessments (below) are the specific assessment types that feed the asset's [regulatory risk classification](https://www.servicenow.com/docs/sClljCVF67CPXRFXGJUFxg "Regulatory risk classification places an AI asset in a risk rating, such as Low or High, based on the score from a risk assessment.") and [aggregated risk rating](https://www.servicenow.com/docs/lJlD8HrrCxUDFyxd0TNUFA "The inherent, control effectiveness, and residual ratings of an AI system come from risk assessment scores that a risk rollup aggregates."). |
| Assessments | Risk assessments | Assessments that identify and rate the risks associated with an AI asset, including inherent risk and the effectiveness of the controls applied to it. Results contribute to the asset's [aggregated risk rating](https://www.servicenow.com/docs/lJlD8HrrCxUDFyxd0TNUFA "The inherent, control effectiveness, and residual ratings of an AI system come from risk assessment scores that a risk rollup aggregates.") and [risk heat map](https://www.servicenow.com/docs/gDb48fnpUrgY6ZFNsRyjwA "Aggregated risk posture displays inherent risk, residual risk, and control effectiveness for AI assets.") placement. |
| Assessments | Regulatory risk assessments | Assessments that determine how an AI asset is classified against regulatory frameworks and requirements, such as unacceptable, high, medium, or low risk. Results populate the asset's [regulatory risk classification](https://www.servicenow.com/docs/sClljCVF67CPXRFXGJUFxg "Regulatory risk classification places an AI asset in a risk rating, such as Low or High, based on the score from a risk assessment."). |
| Assessments | Bulk risk assessments | A grouping of risk assessments run across multiple AI assets at once, used to assess several assets against the same criteria in a single pass instead of individually. For more information, see [Risk assessment project in AI Risk and Compliance](https://www.servicenow.com/docs/access?context=risk-assessment-project-airc&version=brazil&pubname=brazil-governance-risk-compliance&ft:locale=en-US). |
| Governance | Risks | Individual risk records identified for the AI asset, each describing a potential issue along with its inherent risk level. Risks are the basis for the asset's risk heat map and aggregated risk rating. |
| Governance | Controls | Control records that describe the safeguards applied to mitigate the risks identified for the AI asset. The status and weight recorded on each control determine its control effectiveness score, which directly affects the asset's residual risk. |
| Tasks | Attestations | Records that capture confirmation that a control is in place and operating as expected, tied to a specific compliance framework or policy. Attestation state, such as Complete or Ready to take, feeds the asset's [compliance score](https://www.servicenow.com/docs/eKknGglQ_7OqGhO52vPSHA "The compliance score of an AI system measures how well its controls are met, based on the scores of its active related entities.") and compliance posture for priority frameworks. |
| Tracking | Issues | Records that track a compliance or control gap identified for the AI asset that requires remediation. Open issues surface as high-priority items in the asset's compliance posture and top action items. |
| Tracking | Policy exceptions | Records that document an approved deviation from a policy or control requirement for the AI asset, including justification and expiration. Policy exceptions provide an audit trail for accepted risk. |
[Table 1. Governance section record types]

{#gov-airc-governance-records__table_gov-airc-governance-records}