- OFFICIAL classification only — the tooling and process must only be used on source material classified as OFFICIAL. Do not use it with material at any higher classification. If you are unsure about the classification of your source material, seek guidance from your organisation before proceeding.
- Teams must follow their organisation’s information governance policies at all times.
- Data routing: generative AI tools send data to externally hosted models. Depending on the tool, data may be routed to Anthropic, OpenAI, or other providers — and some tools can be configured to use cloud platforms such as Amazon Bedrock or Google Cloud Vertex AI. Consult your organisation’s guidance on approved AI platforms and data routing.
- All team members should complete relevant information governance training before handling legacy application data.
- If in doubt about classification or data handling, stop and seek guidance.
AI-Enabled Legacy Modernisation Playbook
A step-by-step guide to using AI-assisted reverse engineering to produce Product Requirements Documents from legacy application artefacts, developed by Defra's Legacy Application Programme.
