Lighthouse AdvisorySLED AI Adoption Intelligence

State Government

Two first-time sources from Oct 28-29. North Carolina opened a statewide, multi-vendor RFP for enterprise GenAI platforms and frontier-model APIs, open only to model owners and written around public records retention, U.S. data residency and configurable agent controls. A new EY survey of 200 state and local leaders finds most are using generative AI and report benefits, but 84% worry about staff using unapproved tools and only half call their governance agency-wide. Neither reports measured outcomes.

Evidence records
2
Cross-source patterns
1
Evidence classes
1 standards or public-body guidance1 vendor claim
Outcomes
1 emerging1 mixed
Source freshness
2 new this fortnight
Research completed
2026-10-30

Choose a role to see its takeaway beside every record in the ledger.

Patterns across the evidence

Synthesis · Lighthouse Advisory interpretation

1 pattern, each supported by at least two sources
  1. States are answering shadow AI by buying approved enterprise tools with training and records controls built in

    Interpretation. EY finds 84% of state and local leaders worry about unapproved AI tools and only 51% have agency-wide governance, and its government lead recommends approved enterprise tools with guardrails. North Carolina's RFP is that approach in contract form: one statewide path to approved platforms, bundled AI literacy and role-based training, and state control of retention and agent autonomy. Whether approved tools actually reduce shadow use has not been measured in either source.

    Operating questionAfter an approved AI tool launches, how will the agency measure whether unapproved tool use falls, and who checks?

    Supporting evidenceNorth Carolina Department of Information Technology (NCDIT), Statewide IT Procurement OfficeErnst & Young LLP (EY US), Center for Government Modernization; fielded by M Booth Research & Insights

Evidence ledger

Full record · every source keeps its link and limitations

2 records
  1. Standards or public-body guidanceEmergingNew this fortnight

    North Carolina issues statewide multi-vendor RFP for enterprise GenAI platforms and frontier-model APIs, open only to model owners, with state-controlled retention for public records and configurable agent autonomy

    NCDIT issued RFP ITS-800000 on Oct 26 (announced Oct 28) to select multiple vendors for enterprise GenAI platforms, secure API access to their frontier models, and implementation, integration, AI literacy and role-based training for state agencies. Only vendors that own the frontier models may bid; resellers and companies building on others' models are deemed non-responsive, though resellers may fulfill orders later. Requirements include U.S.-only storage and processing, GovRAMP or FedRAMP status or a dated roadmap to GovRAMP authorization within two years, WCAG 2.1 AA accessibility, and state-configurable agent autonomy (read-only or draft-only modes, approval checkpoints, cancellation). Inputs and outputs are state data and may be public records; state retention schedules override vendor deletion defaults. Questions are due Nov. 9 and proposals Nov. 30; the term is three years with two optional one-year renewals. NC's AI governance executive told GovTech a tool once nearly rolled out before the state learned it could not meet public records requirements.

    North Carolina Department of Information Technology (NCDIT), Statewide IT Procurement OfficeNorth Carolina, U.S.2026-10-28 (NCDIT press release); RFP ITS-800000 issue date 2026-10-26; GovTech coverage 2026-10-29

    Why it matters, evidence and limitations
    Why it matters
    Why now: issued this week and not in our archive. It is one of the most detailed state procurement specifications yet for enterprise GenAI and agents, and it writes lessons states have learned (public records, retention, agent controls, training) directly into contract requirements. Other states building statewide AI contracts can compare their terms against it, and bidders have under five weeks to respond.
    Evidence and measured results
    Official press release opened in full; the RFP PDF opened and its scope, business and technical requirements, agentic functionality, public records and term sections read; GovTech report opened for the frontier-model definition and the state AI executive's comments. This is a solicitation: it shows what the state requires, not how any platform performs.
    Limitations and uncertainty
    A solicitation, not an award or outcome. Pricing schedules do not guarantee purchase volume. The reseller exclusion and frontier-model definition may change through addenda; an addendum notes modifications in Ariba that were not reviewed. Effectiveness of any awarded platform is unknown.
  2. Vendor claimMixedNew this fortnight

    EY survey of 200 state and local leaders: 69% have implemented or are implementing generative AI and 96% of adopters report benefits, but 84% worry about shadow AI and only 51% call their governance agency-wide

    EY's online survey of 200 U.S. state and local decision-makers (100 state, 100 local in jurisdictions of 100,000+), fielded July 23 to Aug. 4, 2026 with a margin of error of plus or minus 7 points, found 69% have fully integrated or are implementing generative AI, and 96% of adopters report a benefit: efficiency (59%), cybersecurity and threat detection (56%) and reduced administrative burden (47%). 84% are concerned about staff using unauthorized or unmonitored tools; 89% worry about dedicated AI funding and 86% about current capability. 94% report AI governance policies or strategies, but only 51% say their approach is comprehensive and agency-wide. 75% expect reliance on legacy systems to cause a significant operational failure, and 38% spend significantly more on legacy maintenance than new solutions. EY's release uses the term 'SI' for AI, noting the survey itself used 'AI'.

    Ernst & Young LLP (EY US), Center for Government Modernization; fielded by M Booth Research & InsightsUnited States (100 state and 100 local decision-makers)2026-10-29

    Why it matters, evidence and limitations
    Why it matters
    Why now: released Oct 29 and not in our archive. It adds a third survey this month, alongside NASCIO and UserEvidence, showing policy on paper running ahead of agency-wide oversight. The state half of the sample is small, and results are self-reported benefits, not measured outcomes.
    Evidence and measured results
    EY newsroom release opened, including the methodology note; GovTech's report opened for EY's comments on shadow AI and funding. Benefits are respondent perceptions; no measured baselines. State and local results are combined in the release.
    Limitations and uncertainty
    Commissioned by a consulting firm that sells modernization services; self-reported; online sample of 200 split between state and local; margin of error plus or minus 7 points; full question wording not reviewed.

How to read this edition

Source findings, measured results and limitations come from the cited publications. Patterns, operating questions, role takeaways and implementation considerations are Lighthouse Advisory interpretation, stated as questions to validate locally rather than guaranteed outcomes. Vendor and operator claims are labeled as claims. Full research method.

Standards or public-body guidance
Normative or advisory guidance from a standards body or public institution.
Vendor claim
A supplier-provided assertion that has not been upgraded to independent evidence.