Resources

Standards and common questions

Built on recognized frameworks

NIST AI RMFISO/IEC 42001HIPAA

Our work maps to the frameworks buyers and regulators already reference. We do not promise certification or “compliance.” We help you build and document the due diligence that supports it.

Frequently asked questions

Is AI governance legally required for us?

It depends on your industry and location, and the rules are still developing. Many customers, insurers, and partners already ask for evidence of AI oversight either way. We are not a law firm, so confirm legal obligations with your counsel.

We are a small organization. Is this overkill?

Not if staff use AI tools with sensitive data. An AI Scan is a light way to start.

What is the difference between a scan and an assessment?

A scan finds and lists every AI system in use. An assessment goes further: it maps the data each system touches, rates the risk, and gives you a remediation plan and policy.

How long does an assessment take?

Typically two to four weeks, depending on your size and number of AI systems.

Will you see our sensitive data?

We look at how AI tools are used and what types of data they touch, not the underlying records.

Can I start with a scan or assessment and move to the platform later?

Yes. Results load directly into the platform, so nothing is rebuilt.

Find out what AI is really running in your organization.

Start with an AI Scan and get a complete inventory within weeks.

Book an AI Scan