AI Governance Readiness Checklist

Your team is already using AI. This is the fast way to see where you stand before a customer or an auditor asks. Tick the 20 items that are true today, get your readiness score, then download the PDF to share with your team.

Visibility

Do you know what AI your team uses?

You have an inventory of every AI tool employees use (ChatGPT, Copilot, Gemini, and others).
You know which are personal accounts versus company or commercial accounts.
You know what AI-created assets exist (scripts, macros, spreadsheets, proposals) and who made them.
Anything an employee built with AI that touches your systems is documented.

Data protection

Is sensitive data staying inside your walls?

No customer PII, pricing, or account numbers are pasted into public AI tools.
AI usage runs on commercial API terms, so your data is not used to train models.
Sensitive data is detected and redacted before it reaches any model.
A Business Associate Agreement is in place wherever health data is involved.

Code and automation safety

Can you trust what AI built?

AI-generated scripts have been reviewed for hardcoded credentials and API keys.
You can trace where personal data flows through any employee-built automation.
Every external API call and outbound data transmission is mapped.
Someone other than the original author can maintain each automation.

Content credibility

Will AI-written work survive scrutiny?

AI-drafted proposals and reports are checked for fabricated stats and citations before they go out.
You have a policy on whether and how you disclose AI-assisted work to customers.

Compliance and audit trail

Do you have an answer when someone asks?

You can produce a written AI usage policy on demand.
Your AI usage maps to the frameworks that apply to you (SOC 2, HIPAA, state privacy laws).
Every AI interaction with company data is logged: what was sent, when, and by whom.
Flagged items have an owner and a remediation path.

Ownership and continuity

What happens when someone leaves?

A departing employee's AI-built tools are documented and transferable.
You own the source code, documentation, and change history for every AI integration.

Take the checklist with you

Enter your details and we will email you the full checklist as a branded PDF, ready to share with your team or bring to your next audit. No spam, and a real person reads every request.

The complete 20-point checklist and scoring guide as a PDF.
A quick read on what a full audit of your AI assets would involve.
Nothing else unless you ask. Your details stay with us.

Want us to run this audit across your whole company?

We inventory the AI your team already uses, grade every asset for security, exposed data, and compliance risk, and build the integrations you actually need, all version-controlled and yours.

See how AI governance works