| Primary decision | May this user or device reach this destination or content category? | How should this supported AI interaction proceed under district policy? |
|---|
| Normal control point | Network, DNS, proxy, endpoint, or browser access layer, depending on product architecture. | Managed Chrome client at the supported AI use point. |
|---|
| Coverage model | Broad web destinations and categories, with depth that varies by filter. | Deep governance on named AI surfaces, plus optional blocking for detected unapproved AI interfaces on managed Chrome. |
|---|
| AI inside an allowed site | May require a vendor-specific application control or a newly categorized URL, depending on the filter. | Can block a detected unapproved AI chat or writing interface while leaving the surrounding site available. |
|---|
| Classroom context | Can use identity and policy groups, depending on the product. | Tenet District adds roster, class, teacher, period, and schedule differentiation. |
|---|
| Sensitive AI content | Some products offer AI or data controls, with product-specific depth. | Tenet applies configured sensitive-data checks and transformations where the AI surface supports them. |
|---|
| Best role | Foundational Internet access, category, and threat policy. | An additional governance layer for direct use of supported AI products. |
|---|