State & Local GovernmentIssue 522 records
State Government
Two first-time sources from Oct 28-29. North Carolina opened a statewide, multi-vendor RFP for enterprise GenAI platforms and frontier-model APIs, open only to model owners and written around public records retention, U.S. data residency and configurable agent controls. A new EY survey of 200 state and local leaders finds most are using generative AI and report benefits, but 84% worry about staff using unapproved tools and only half call their governance agency-wide. Neither reports measured outcomes.
- Evidence records
- 2
- Cross-source patterns
- 1
- Evidence classes
- 1 standards or public-body guidance1 vendor claim
- Outcomes
- 1 emerging1 mixed
- Source freshness
- 2 new this fortnight
- Research completed
- 2026-10-30
Choose a role to see its takeaway beside every record in the ledger.
Patterns across the evidence
Synthesis · Lighthouse Advisory interpretation
States are answering shadow AI by buying approved enterprise tools with training and records controls built in
Interpretation. EY finds 84% of state and local leaders worry about unapproved AI tools and only 51% have agency-wide governance, and its government lead recommends approved enterprise tools with guardrails. North Carolina's RFP is that approach in contract form: one statewide path to approved platforms, bundled AI literacy and role-based training, and state control of retention and agent autonomy. Whether approved tools actually reduce shadow use has not been measured in either source.
Operating questionAfter an approved AI tool launches, how will the agency measure whether unapproved tool use falls, and who checks?
Supporting evidenceNorth Carolina Department of Information Technology (NCDIT), Statewide IT Procurement OfficeErnst & Young LLP (EY US), Center for Government Modernization; fielded by M Booth Research & Insights
Evidence ledger
Full record · every source keeps its link and limitations
North Carolina issues statewide multi-vendor RFP for enterprise GenAI platforms and frontier-model APIs, open only to model owners, with state-controlled retention for public records and configurable agent autonomy
NCDIT issued RFP ITS-800000 on Oct 26 (announced Oct 28) to select multiple vendors for enterprise GenAI platforms, secure API access to their frontier models, and implementation, integration, AI literacy and role-based training for state agencies. Only vendors that own the frontier models may bid; resellers and companies building on others' models are deemed non-responsive, though resellers may fulfill orders later. Requirements include U.S.-only storage and processing, GovRAMP or FedRAMP status or a dated roadmap to GovRAMP authorization within two years, WCAG 2.1 AA accessibility, and state-configurable agent autonomy (read-only or draft-only modes, approval checkpoints, cancellation). Inputs and outputs are state data and may be public records; state retention schedules override vendor deletion defaults. Questions are due Nov. 9 and proposals Nov. 30; the term is three years with two optional one-year renewals. NC's AI governance executive told GovTech a tool once nearly rolled out before the state learned it could not meet public records requirements.
Why it matters, evidence and limitations
- Why it matters
- Why now: issued this week and not in our archive. It is one of the most detailed state procurement specifications yet for enterprise GenAI and agents, and it writes lessons states have learned (public records, retention, agent controls, training) directly into contract requirements. Other states building statewide AI contracts can compare their terms against it, and bidders have under five weeks to respond.
- Evidence and measured results
- Official press release opened in full; the RFP PDF opened and its scope, business and technical requirements, agentic functionality, public records and term sections read; GovTech report opened for the frontier-model definition and the state AI executive's comments. This is a solicitation: it shows what the state requires, not how any platform performs.
- Limitations and uncertainty
- A solicitation, not an award or outcome. Pricing schedules do not guarantee purchase volume. The reseller exclusion and frontier-model definition may change through addenda; an addendum notes modifications in Ariba that were not reviewed. Effectiveness of any awarded platform is unknown.
EY survey of 200 state and local leaders: 69% have implemented or are implementing generative AI and 96% of adopters report benefits, but 84% worry about shadow AI and only 51% call their governance agency-wide
EY's online survey of 200 U.S. state and local decision-makers (100 state, 100 local in jurisdictions of 100,000+), fielded July 23 to Aug. 4, 2026 with a margin of error of plus or minus 7 points, found 69% have fully integrated or are implementing generative AI, and 96% of adopters report a benefit: efficiency (59%), cybersecurity and threat detection (56%) and reduced administrative burden (47%). 84% are concerned about staff using unauthorized or unmonitored tools; 89% worry about dedicated AI funding and 86% about current capability. 94% report AI governance policies or strategies, but only 51% say their approach is comprehensive and agency-wide. 75% expect reliance on legacy systems to cause a significant operational failure, and 38% spend significantly more on legacy maintenance than new solutions. EY's release uses the term 'SI' for AI, noting the survey itself used 'AI'.
Why it matters, evidence and limitations
- Why it matters
- Why now: released Oct 29 and not in our archive. It adds a third survey this month, alongside NASCIO and UserEvidence, showing policy on paper running ahead of agency-wide oversight. The state half of the sample is small, and results are self-reported benefits, not measured outcomes.
- Evidence and measured results
- EY newsroom release opened, including the methodology note; GovTech's report opened for EY's comments on shadow AI and funding. Benefits are respondent perceptions; no measured baselines. State and local results are combined in the release.
- Limitations and uncertainty
- Commissioned by a consulting firm that sells modernization services; self-reported; online sample of 200 split between state and local; margin of error plus or minus 7 points; full question wording not reviewed.
How to read this edition
Source findings, measured results and limitations come from the cited publications. Patterns, operating questions, role takeaways and implementation considerations are Lighthouse Advisory interpretation, stated as questions to validate locally rather than guaranteed outcomes. Vendor and operator claims are labeled as claims. Full research method.
- Standards or public-body guidance
- Normative or advisory guidance from a standards body or public institution.
- Vendor claim
- A supplier-provided assertion that has not been upgraded to independent evidence.