AI Risk Assessment
A full picture of the AI in use across your company and the risk it carries, ranked so you know what to fix first.
What's included
Full scope, no surprises
Every assessment covers the same ground. You get a complete picture of your AI exposure — approved tools, shadow AI, vendor features, and the data flowing through all of it.
AI inventory
We identify every AI tool in use across your company — including unapproved ones and AI features embedded in software you already own. Most companies find more than they expect.
Data flow review
We map what data reaches AI services and how — prompts, documents, API calls, integrations. This is where the real exposure usually lives.
Vendor and model risk
We review the AI vendors and models your company relies on: data retention policies, training data practices, security posture, and contractual protections.
Ranked findings and 90-day plan
Findings are ranked by risk so you know what to fix first. You leave with a 90-day remediation plan your team can act on immediately.
Deliverables
What you receive
Right for you if
- You don't have a clear picture of which AI tools your employees are using.
- You're in a regulated industry and need to demonstrate AI oversight to auditors or customers.
- Your board or leadership has asked about AI risk and you need a credible answer.
- You want to build a governance program but need to know what you're governing first.
Natural next step
AI Acceptable Use Policy
Most clients follow the assessment with a policy written around what we found — approved tools, prohibited uses, and a process for requesting new ones.
Book a 30-minute AI exposure review
A free call for security leaders. You leave with a clearer view of your AI exposure, whether or not you hire us.