Every AI decision for State Benefits Portal Modernization traces back to a specific phrase in the source document. This map shows the full chain: source phrase -> extracted fact -> department routed -> specialist conclusion -> final condition.
| Source phrase | Extracted fact | Dept. | Confidence | Conclusion / condition |
|---|---|---|---|---|
| "The RFP package does not include a signed data processing agreement" Security questionnaire, p. 2 | DPA absent - privacy terms must be identified | Security | 91% | ! Condition 2 - obtain signed DPA |
|
Full source extract The RFP package does not include a signed data processing agreement. Vendors must identify any privacy, residency, retention, data processing, or subcontractor terms required before implementation or production use.View in source document -> AI reasoning The RFP references regulated data but does not include a data processing agreement or residency commitment. Specialist conclusion Security reviewer required a signed DPA and residency confirmation before contract execution. |
||||
| "The agency has not specified whether data residency must be state-only, United States-only, or otherwise restricted" Security questionnaire, p. 5 | Data residency requirement is unspecified | Security | 94% | ! Condition 2 - confirm residency before signing |
| "The proposed solution must log administrator actions, citizen account access events, case-worker updates" Security questionnaire, p. 3 | Detailed audit logging required for sensitive workflows | Security | 92% | ✓ Supporting requirement - include in security questionnaire response |
Showing 3 of 11 evidence items. Filter by department or risk to narrow.