The framework
Three questions. Every record answers all of them.
Who, when, whether. The same three questions a board, an insurer or a regulator asks, answered before they have to.
Who
Who approved it
Named, with the role they held at that exact moment, not just a signature with nothing behind it.
When
When it was approved, and when it expires
Authorization isn't permanent by default. Every grant carries a named date or condition that voids it.
Whether
Whether the conditions still hold
An approval from six months ago on a system that's since changed isn't authorization anymore. Whether it still applies is checked, not assumed.
12 Questions
Comprehensive assessment across strategy, tools, policy, monitoring, vendors, and regulatory readiness
2 Minutes
Instant results with 0-100 governance maturity score and peer benchmarking
Evidence Package
Automatically generated audit ready framework for regulators (assessment plus risk register plus roadmap)
Governance self-check
Can you prove it?
Three questions every regulator now asks. Answer honestly, watch your exposure.
01If a regulator asked today, could you show who signed off on each AI tool you use?
02Can you produce a timestamped record of your last AI governance review?
03Do you know every AI tool your team is putting company data into right now?
Global coverage
Mapped across 11 jurisdictions
Your assessment is benchmarked against the regulators that examine AI governance in each market you operate in.
A score is a start. A record is a defence.
The assessment finds the gap.
The record proves you closed it.
Six dimensions, scored in plain numbers.
Strategy, tools and data, policy, monitoring, vendor risk and regulatory readiness. A 0 to 100 maturity score, benchmarked, with your single biggest gap named.
An evidence package, not just a result.
Every assessment generates an audit ready framework: the scored assessment, a risk register and a 90 day roadmap, built to be handed to a board, an insurer or a regulator.
Sealed when it matters.
On the paid tiers, high value governance records carry an independent RFC 3161 timestamp and a tamper evident chain, so the date on the record is a fact a third party attests to, not a claim.
Occasional updates only, unsubscribe anytime. One governance assessment per email. Results delivered instantly.
Here for the marketing copy side instead? Run a free compliance check.